Surviving an I-9 Audit: Notices of Inspection, E-Verify, and Penalties

An I-9 audit begins with a document called a Notice of Inspection, served by Immigration and Customs Enforcement, often in person and usually without warning. It normally gives the employer three business days to produce its Form I-9 records. That window is the entire opportunity to organize a defense, and it is far too short to build one from scratch.

Everything that decides the outcome of an audit happened before the notice arrived: whether forms exist for every required employee, whether they were completed on time, whether corrections were made properly, and whether the company ever demanded documents it had no right to demand. This brief covers what the inspection tests and what an employer can still do once the notice is in hand.

The notice and the three-day clock

The notice identifies the records requested. Typically that means the I-9s themselves plus supporting material: payroll records, a list of current and terminated employees, business licenses, articles of incorporation, and — for E-Verify participants — case histories. A subpoena often accompanies the notice for the broader records.

An extension of the production window is sometimes granted and is worth requesting where the request is genuinely burdensome, but the request should be made immediately and in writing. What an employer should not do is treat the three days as time to improve the file. Backdating, re-signing, or recreating forms after service converts a civil paperwork case into something far worse, and inspectors are experienced at spotting uniform ink, identical handwriting, and forms on an edition of the document that did not exist on the hire date.

The first hour should instead be spent stopping destruction. Suspend any routine purge of personnel records and preserve the I-9 files exactly as they exist, applying the same discipline a litigation hold imposes in civil matters. Then copy the entire set before anything is delivered, so that the company knows precisely what was produced.

1. Day of service

   Accept the notice, note the date and time, identify the serving officer, and notify counsel. Freeze all record destruction and copy the complete I-9 set before production.

2. Within three business days

   Produce the requested records, or produce them with a written extension request for anything not yet gathered. Keep an itemized production log.

3. After production

   Run a parallel internal review against the same records so the company learns what the inspector will find before the results letter arrives.

4. On notice of technical or procedural failures

   At least ten business days are given to correct the identified errors. Corrections are made on the existing forms, dated and initialed by the person making them, never rewritten.

5. On a notice of suspect documents

   The agency states that certain workers appear unauthorized. The employer must decide, promptly, how to respond for each named worker, giving them an opportunity to present other valid documentation.

6. On a notice of intent to fine

   A written request for a hearing before the Office of the Chief Administrative Hearing Officer must be filed within the period stated in the notice, or the fine becomes final.

Substantive versus technical, and why the line decides the fine

Not every error is equal. The statute distinguishes substantive violations from technical or procedural ones, and only the second category carries a cure right. Where a technical or procedural failure is identified, the employer must be given at least ten business days to correct it. Substantive violations cannot be corrected after the notice — they are counted.

Penalty amounts are set by regulation and adjusted annually for inflation, so any figure quoted secondhand is likely stale — check the current schedule rather than relying on a number in a training deck. What is stable is how the amount is set. Adjudicators weigh the size of the business, good faith, the seriousness of the violations, whether unauthorized workers were actually involved, and the employer's history. Good faith is the factor a company can build in advance, through documented internal audits, written procedures, and training records.

Knowing employment of unauthorized workers is a separate and much more serious category, with higher penalties and, in pattern cases, criminal exposure. Constructive knowledge counts: ignoring obvious signals, or acting on a wink from a supervisor, is treated as knowledge. This is why an internal audit run under counsel's direction as a privileged investigation is the right structure when a company suspects a real problem rather than a filing problem.

Correcting records without creating new violations

Corrections have a form. Draw a single line through the incorrect entry, write the correct information, and initial and date the change. Do not use correction fluid, do not overwrite, and do not create a clean replacement form and discard the original. Where a form is missing entirely, complete a new one on the current edition using today's date in the certification, and attach a signed memorandum explaining what happened. The memorandum is not a defense to the violation, but it is evidence of good faith, and good faith is a penalty factor.

Only the person who can properly attest may sign. An employee corrects Section 1; the employer representative who physically examined the documents corrects the employer section. If that person has left the company, a current representative may complete a new form with an explanatory note rather than sign for work they did not do.

• Reverification of the wrong workers. Permanent residents' cards should not be reverified on expiration, and citizens are never reverified. A calendar that treats every document expiration as a trigger produces discrimination claims.
• Over-documentation. Asking for a specific document, or for more documents than the lists require, is an unfair documentary practice regardless of intent. The employee chooses.
• Selective auditing. Running an internal audit only on foreign-born staff, or only on one worksite's visa holders, converts a compliance exercise into evidence of discrimination.
• Retention gaps. Forms must be kept for three years after the hire date or one year after employment ends, whichever is later. Purging on a flat schedule destroys records that were still required.
• Uncontrolled electronic systems. An electronic I-9 platform must meet integrity, audit-trail, and reproduction standards. A system that cannot show who changed what and when is worse than paper.

E-Verify, and the duties enrollment creates

E-Verify is a separate system layered on top of the I-9. Federal law does not require it of employers generally; it is required for federal contractors and subcontractors covered by the applicable contract clause, and a number of states mandate it for some or all employers. State requirements change, so an employer operating across state lines should confirm each state's current position rather than apply one policy everywhere.

Enrollment brings obligations. A case must be created for each new hire within the deadline set by the program, generally by the third business day after the employee starts work. Participating employers must run every new hire at an enrolled site rather than choosing which employees to check, and may not use the system to prescreen applicants before an offer is accepted.

The tentative nonconfirmation process is where most employer liability arises. When a case returns a mismatch, the employer must promptly notify the employee privately, provide the referral materials, and let the employee decide whether to contest. While a contested case is pending, the employer may not terminate, suspend, withhold pay, delay training, or otherwise take adverse action based on the mismatch. Only a final nonconfirmation permits the employer to act on the case result. Employers who treat a mismatch as a resignation event generate exactly the claim the Justice Department's Immigrant and Employee Rights Section exists to bring.

Verify before relying: USCIS periodically issues new Form I-9 editions, and since 2023 an alternative remote document examination procedure has been available to qualified E-Verify participants in good standing. Confirm the current form edition and whether the remote procedure applies to your enrollment status before setting policy.

The rules that constrain every step

Verification duties and anti-discrimination duties point in opposite directions, and employers get caught in the middle. The statute prohibits citizenship-status and national-origin discrimination in hiring and firing, unfair documentary practices, and retaliation. The employee presents documents from the acceptable lists; the employer accepts what reasonably appears genuine and relates to the person. Requesting a green card from someone who offered a driver's license and a Social Security card is a violation even if the employer thought it was being careful.

These duties apply to every employee, including U.S. citizens, and they sit entirely apart from sponsorship processes such as labor certification (PERM). An employer can run a flawless sponsorship program and still fail an I-9 inspection badly, because the two systems test different things. The evidence rules that govern employment records generally, covered in our brief on payroll records and wage audits, apply to the supporting documents an inspection requests.

Questions the desk gets

Should we run an internal audit before anything happens?

Yes, and the structure matters as much as the review. Audit the full population rather than a subset, apply consistent criteria, correct properly on the existing forms, and document the methodology. Run it under counsel where the company suspects it will find substantive problems rather than clerical ones. A documented internal audit is the most reliable evidence of good faith available when penalties are calculated.

A worker's employment authorization document is expiring. What do we do?

Reverify before the authorization expires, using the employee's choice of acceptable documents establishing continued authorization. Some categories benefit from automatic extensions that appear on the receipt notice rather than on the card itself, a mechanic covered in our brief on employment authorization categories and renewals. Terminating a worker whose authorization was automatically extended is a common and expensive mistake.

Can we correct forms after the Notice of Inspection arrives?

Only for technical or procedural failures the agency identifies, within the correction period it gives. Substantive violations are fixed as of the correction date, not retroactively, and are counted. Any correction made after service must be visibly dated as of when it was made. Undated or backdated changes discovered during inspection convert a manageable penalty case into an allegation of falsification.

Does an inspection mean the government thinks we hired unauthorized workers?

Not necessarily. Inspections arise from industry initiatives, tips, prior findings, and routine selection. Many end with a warning notice or a compliance letter. What changes the character of the case is evidence that someone at the company knew: a supervisor's remark, an ignored mismatch, or a pattern of hires from a single source. Those facts, not the paperwork, drive the serious outcomes.

How does this interact with visa petitions we have filed?

They are separate systems that share facts. An inspection can surface wage and worksite information that also appears in a nonimmigrant petition, and inconsistencies between the two are noticed. Employers sponsoring workers should expect their I-9 practices and their petition records to be read together, a dynamic examined in our brief on H-1B site visits and FDNS inspections.

Sequencing the work

Before any notice arrives, do three things. Confirm that an I-9 exists for every employee hired after the statutory start date and that the retention rule has been applied correctly to departures. Write down who is authorized to complete the employer section and train them on the document lists. Decide, in writing, whether the company uses E-Verify and at which sites, and apply that decision uniformly.

When a notice does arrive, the sequence is fixed: preserve, copy, produce, then review internally against the same records. Assign one person to be the point of contact with the agency, and route all questions through counsel. Employers with active sponsorship programs frequently bring in an I-9 compliance attorney at the moment of service rather than after the results letter, because the production decisions made in the first three days shape everything that follows.

Finally, treat the results as a program input. A company that fixes the named errors and changes nothing else will see the same findings at the next inspection. The employers who do well are the ones whose second audit is quiet because the first one produced written procedures. Related material, including the Department of Labor side of employer compliance in our brief on PERM audits and supervised recruitment, sits on the Immigration Strategy & Status desk.