Knowledge Center
Risk

I-9 Audits: How to Prepare and Survive

I-9 audits are one of the most common enforcement actions against small businesses. This guide explains how audits work, the most common mistakes, and how to prepare your forms.

Last updated: July 2026

Key Takeaways

  • I-9 violations carry fines from $252 to $2,507 per violation, and a business with 20 employees can face thousands in penalties for paperwork errors alone.
  • The most common I-9 mistakes are missing signatures, expired verification, and forms not retained for the required period.
  • ICE can audit any employer, and audits are increasing, not decreasing.
  • A self-audit of your I-9 forms before a government audit can identify and correct errors, significantly reducing potential penalties.

What Is the I-9 Form

The Form I-9, Employment Eligibility Verification, is a federal form that every employer in the United States must complete for every employee hired after November 6, 1986. The form verifies the identity and employment authorization of the employee. Both the employer and the employee have responsibilities for completing it.

The employee completes Section 1 on or before their first day of work. The employer completes Section 2 by physically examining original documents that establish identity and employment authorization within 3 business days of the employee's first day. The employer must retain the form for either 3 years after the date of hire or 1 year after the date employment ends, whichever is later.

How I-9 Audits Work

Immigration and Customs Enforcement (ICE) conducts I-9 audits through Notices of Inspection. When ICE serves a notice, the employer has 3 business days to produce all I-9 forms. ICE reviews the forms for compliance and issues a Notice of Intent to Fine if violations are found. The employer has the opportunity to contest the fines before an administrative law judge.

Audits can be triggered by various factors, including random selection, tips, industry targeting, or as part of a broader investigation. The number of I-9 audits has increased significantly in recent years, and small businesses are not exempt. An audit can cover every I-9 form you have on file, meaning the potential penalties multiply with your headcount and retention history.

The Most Common I-9 Mistakes

Most I-9 violations are paperwork errors, not knowing employment of unauthorized workers. But paperwork errors still carry significant fines. These are the mistakes that auditors find most frequently.

  • Section 1 not completed by the employee on or before the first day of work
  • Section 2 not completed within 3 business days of hire
  • Employer did not physically examine original documents, accepting copies instead
  • Documents listed do not meet the requirements for List A or List B plus List C
  • Missing or incorrect signatures from the employer or employee
  • Forms not retained for the required period (3 years after hire or 1 year after termination)
  • Corrections made improperly, with white-out or overwritten text instead of a single line through the error

I-9 Penalty Structure

I-9 penalties are assessed per violation, not per employee, but a single employee's form can have multiple violations. Paperwork violations range from $252 to $2,507 per form. Knowing employment of unauthorized workers carries much higher penalties, from $646 to $25,076 per unauthorized employee, plus potential criminal charges.

For a business with 20 employees, even pure paperwork errors can result in $5,000 to $50,000 in fines if multiple violations exist per form. The penalties are adjusted annually for inflation. The cost of a self-audit and correction is a fraction of the cost of a government audit finding the same errors.

How to Conduct a Self-Audit

A self-audit involves reviewing every I-9 form on file for completeness and accuracy. Check that Section 1 and Section 2 are fully completed, signed, and dated. Verify that the documents listed are acceptable and that the employer certification is signed. If you find errors, correct them properly: draw a single line through the incorrect information, write the correct information, and initial and date the correction. Never use white-out or erase.

If a form is missing entirely, you cannot backdate it. Complete a new form with the current date and note that it is a late completion. If you discover that an employee's work authorization has expired, request updated documentation. If the employee cannot provide it, you may need to terminate employment. A PEO partnership includes I-9 management and compliance as part of the service, which eliminates the burden and the risk of self-management.

Frequently Asked Questions

Can I accept a copy of a document instead of the original for I-9 verification?

No. The employer must physically examine the original documents. Accepting copies is a violation. The only exception is for remote employers using an authorized representative or the DHS alternative procedure, which requires specific steps and documentation. If you are a remote employer, verify that you are following the current DHS alternative procedure correctly.

What if I cannot find an I-9 form for a current employee?

You cannot backdate a missing form. Complete a new I-9 with the current date and note that it is a late completion. If the employee's work authorization has expired, request updated documentation. Missing forms are a violation, but a late-completed form is better than no form. Document the reason for the late completion.

Does a PEO handle I-9 compliance?

Yes. In a PEO arrangement, the PEO manages I-9 completion, verification, retention, and compliance. The PEO uses electronic I-9 systems that prevent common errors and maintain records properly. This eliminates the burden of self-management and significantly reduces the risk of audit penalties.

Related Guides

Free Strategy Session

Put This Guide Into Action

Reading is the first step. The next step is a free, no-obligation strategy session where we review your specific situation and show you exactly where the savings are.