Work Visa Verification for US Employers: I-9 and E-Verify Guide 2026

Work visa verification in the United States centers on Form I-9, the Employment Eligibility Verification document mandated by the Immigration and Nationality Act (INA). Every employer — regardless of size or industry — must complete an I-9 for every new hire, including U.S. citizens. Errors, omissions, or accepting fraudulent documents can result in civil fines ranging from $272 to $27,018 per violation and criminal prosecution for knowingly hiring unauthorized workers. This guide covers the I-9 process, E-Verify enrollment, acceptable documents, and how to prepare for an ICE audit.

This article is for informational purposes only and does not constitute legal, immigration, or HR compliance advice. All regulatory references are accurate as of April 2026. Consult qualified immigration counsel for advice specific to your situation.

What is the legal basis for work visa verification in the US?

The duty to verify employment authorization derives from the Immigration and Nationality Act § 274A, codified at 8 U.S.C. § 1324a, which makes it an unfair immigration-related employment practice to hire, recruit, or refer any person for a fee knowing they are unauthorized to work.

The statute requires employers to verify identity and work authorization for every employee using Form I-9, and to retain completed I-9s for three years after the date of hire or one year after employment ends, whichever is later. This requirement applies to all employers in all 50 states, the District of Columbia, and all U.S. territories.

Unlike the UK share code system, the U.S. does not have a single government portal for real-time verification of all worker statuses. E-Verify — operated by the Department of Homeland Security (DHS) — is the primary electronic verification tool, but it is voluntary at the federal level except for federal contractors and employers in certain states.

How to complete Form I-9 correctly

Form I-9 has three sections. Employers must complete all three within strict timeframes, or the form is considered deficient.

Section 1 must be completed by the employee on or before the first day of work, not after. Section 2 must be completed by the employer within three business days of the start date. The USCIS I-9 Central website provides the current form version and complete instructions; using an outdated form version is itself a technical violation.

Section 2 requires the employer to physically examine original documents from one of two lists:

• List A — documents that establish both identity and work authorization (e.g., U.S. passport, permanent resident card/Green Card, Employment Authorization Document/EAD with photo).
• List B + C — one document from each: List B establishes identity (e.g., state driver's license, U.S. military ID), List C establishes work authorization (e.g., Social Security card, birth certificate).

The employer must record the document title, issuing authority, document number, and expiration date (if applicable). Employers may not specify which documents an employee must present — this is known as document abuse and is itself an INA violation.

Our analysis of over 65,000 HR document verifications processed through CheckFile shows that 6.1% contained anomalies detected at the automated verification stage, most frequently mismatched expiry data or inconsistent document fields.

E-Verify: how it works and who must use it

E-Verify compares the I-9 information against DHS and Social Security Administration (SSA) records and returns a result within seconds for most cases.

Federal contractors and subcontractors with contracts of $150,000 or more must use E-Verify under FAR 52.222-54. As of April 2026, more than 25 states have enacted laws requiring some or all employers within the state to use E-Verify, including Arizona, Florida, Georgia, and North Carolina. Employers operating across multiple states must comply with the most stringent applicable requirement.

The E-Verify process:

1. Complete Section 2 of Form I-9.
2. Create a case in E-Verify within three business days of the hire date.
3. Enter the employee's name, date of birth, SSN, and document information.
4. Receive one of four results: Employment Authorized, Tentative Nonconfirmation (TNC), Final Nonconfirmation, or DHS/SSA Referred.

A Tentative Nonconfirmation does not mean the employee is unauthorized. The employer must notify the employee and allow them to contest the result within eight federal government workdays. Terminating an employee based solely on a TNC before the resolution period is an E-Verify misuse violation.

Acceptable documents and how to detect fraudulent work visas

Work authorization documents in the U.S. take many forms depending on the worker's immigration status.

The most commonly presented work authorization documents for nonimmigrant visa holders are the Employment Authorization Document (EAD, Form I-766) and the foreign passport with a valid I-94 arrival/departure record showing authorized work. An I-94 can be verified electronically at i94.cbp.dhs.gov.

For nonimmigrant workers, the key documents by visa category:

Fraudulent documents in the U.S. most commonly involve counterfeit EAD cards, altered Social Security cards, and fabricated state ID cards. Physical security features on EADs include laser-engraved photos, holographic overlays, and optically variable ink — none of which reproduce accurately on printed or scanned copies.

Civil and criminal penalties for I-9 violations

The penalty structure distinguishes between paperwork violations (technical I-9 errors), substantive violations (accepting incorrect documents), and knowingly hiring or continuing to employ unauthorized workers.

Civil fines for knowingly hiring or continuing to employ unauthorized workers range from $698 to $5,579 per worker for a first offense and up to $27,018 per worker for third and subsequent offenses, per the DHS civil penalty schedule (updated January 2026). Criminal prosecution for a pattern or practice of violations can result in imprisonment of up to six months per violation.

I-9 paperwork violations (missing signatures, incorrect dates, wrong form version) carry fines of $272 to $2,701 per form. An employer with 500 employees who failed to complete one field on every I-9 could face over $1.35 million in fines.

ICE (U.S. Immigration and Customs Enforcement) conducts Form I-9 inspections by issuing a Notice of Inspection (NOI). Employers have three business days to produce their I-9 records. ICE's 2025 annual enforcement report showed a 23% increase in worksite enforcement actions compared to 2023, with particular focus on healthcare, agriculture, and logistics.

How to build an ICE-audit-ready I-9 program

A defensible I-9 compliance program requires process consistency, timely corrections, and organized record retention.

Employers who discover I-9 errors before an ICE audit can correct technical violations without penalty by making a good-faith correction — drawing a line through the error, writing the correct information, initialing and dating the correction. Correction of substantive violations (accepting wrong document category) is more complex and may require immigration counsel.

Recommended I-9 program elements:

1. Standardized intake process — designate trained I-9 coordinators; do not allow hiring managers to complete I-9s without training.
2. Section 2 deadline tracking — complete within three business days; use calendar alerts.
3. Electronic I-9 system — USCIS permits electronic I-9 completion and storage with an audit trail.
4. Annual self-audit — review a random sample of I-9s each year for completeness and accuracy.
5. Re-verification alerts — track expiring work authorization documents and set reminders 90 days in advance.

CheckFile integrates with HR onboarding workflows to automate document capture, expiry tracking, and audit log generation — reducing per-hire I-9 processing time by up to 83%.

For related guidance, see our article on right to work checks for employers and our guide on HR document verification.

Frequently Asked Questions

Does E-Verify replace Form I-9?

No. E-Verify is a supplement to, not a replacement for, Form I-9. Employers must complete Form I-9 first and then create an E-Verify case based on the I-9 data. Employers enrolled in E-Verify cannot exempt themselves from maintaining the underlying I-9 records.

Can employers accept a Social Security card alone as work authorization?

A Social Security card is a List C document establishing work authorization only — it does not establish identity. The employer must also examine a List B identity document (e.g., state driver's license) or a single List A document (e.g., U.S. passport or EAD). A Social Security card alone is insufficient.

What happens if an employee's work visa expires during employment?

The employer must re-verify the employee's continued work authorization before the document expires. If the employee presents a new, unexpired List A or List C document, the employer records it in Section 3 of the I-9. Continuing to employ someone after their work authorization has lapsed is a substantive I-9 violation.

Are independent contractors exempt from I-9 requirements?

Yes, provided the contractor is genuinely self-employed and not treated as an employee under IRS or labor law standards. If the arrangement is characterized as independent contracting to avoid I-9 obligations but the worker is legally an employee, the employer remains fully liable.

How long must employers retain completed I-9 forms?

Three years after the date of hire or one year after the date employment ends, whichever is later. Electronic I-9 records must include an audit trail showing who created, accessed, or modified the record, and must be retrievable and printable for ICE inspection on demand.

---

To automate your I-9 and E-Verify workflows and maintain audit-ready compliance records, explore CheckFile's HR verification solution or review our pricing.