What Is E-Verify? Rules, States, and Employer Duties
E-Verify checks work authorization electronically after the I-9. Which states require it, the three-day rule, and what to do with a mismatch.
What Is E-Verify?
The electronic check that sits on top of the I-9 rather than replacing it: who is actually required to use it and in which states, the order of operations that cannot be varied, the three business day rule, and the mismatch process where almost all of the enforcement risk lives
Two things about E-Verify surprise employers who have just been told they need it. The first is that it does not replace the I-9; it sits on top of it, which means an obligation was added and none was removed.
The second is where the actual risk lives. Almost nobody gets into trouble over the electronic check itself. They get into trouble over what they did in the fortnight after it came back with a mismatch, because the correct answer during that period is to change absolutely nothing, and the instinct is to do something.
This covers who is required to use it, the state mandates that catch most small businesses, the fixed order of operations, the three business day rule, and the mismatch process. I build the people and records tooling for businesses without an HR department at FirstHR. This is general information rather than legal advice, and immigration compliance is an area where a mistake is expensive enough to justify professional input.
What E-Verify Is
E-Verify is a federal internet-based system that checks the information from a completed Form I-9 against government records to confirm that a newly hired employee is authorised to work in the United States.
The underlying legal obligation it supports is the requirement that employers verify the identity and work authorisation of everyone they hire (8 U.S.C. 1324a). E-Verify is a way of adding an electronic check to that process, not a substitute for it.
It also applies only to new hires. Enrolling does not create a duty to run existing staff through the system, and doing so retroactively is generally not permitted outside specific federal contractor circumstances. That distinction matters because employers newly required to enrol frequently assume their whole workforce has to go through it.
Is It Required?
Federally, for most private employers, no. The two routes to a mandate are federal contracting and state law, and the second is what reaches most small businesses.
The practical consequence is that whether you need E-Verify is decided by your address and your customers rather than by your size or your industry. A ten-person business in one state has no obligation; the same business across a state line may have had one from its first employee.
The State Requirements
Around eleven states require E-Verify for all or most private employers, and the conditions differ enough that a national summary is only a starting point.
| Pattern | States following it | What it means in practice |
|---|---|---|
| All private employers, no threshold | Alabama, Arizona, Mississippi, South Carolina | The obligation attaches from your first employee |
| Above an employee threshold | Florida, Georgia, North Carolina, Tennessee, Utah | Thresholds range from ten employees to well over a hundred |
| E-Verify or retain specified documents | Louisiana, Montana | An alternative compliance route exists, with its own recordkeeping |
| Sector-specific requirements | Several states, including construction contracting rules | Can attach to an industry rather than to all employers in the state |
| Public employers and contractors only | Numerous states | Reaches private businesses through public contracts rather than directly |
| No state requirement | The remaining states | Federal contractor status can still create one |
Two features of this landscape make it harder than the table suggests. Thresholds are counted differently between states, so a business at the edge of one may need to check how its own state counts part-time and seasonal staff. And the requirements change: legislatures revisit them regularly, and a state that had no mandate two years ago may have one now.
For a business operating across state lines the safe posture is usually to verify consistently everywhere rather than to run different processes per location, provided that is done for genuinely every new hire at each participating site.
Federal Contractors
Federal contractors whose contracts contain the E-Verify clause must enrol and use the system, and their timeline is more demanding than a state mandate.
Enrolment is required within a defined period after contract award, typically thirty days, after which new hires are verified within the standard three business day window. Contractors may also be required to verify existing employees assigned to the covered contract, within a defined period after enrolment, which is the one situation where the system reaches beyond new hires.
The clause flows down, so a subcontractor on a covered contract can inherit the obligation without having any direct relationship with the federal government. Checking whether the clause is in your subcontract is a bid-time question rather than an onboarding-time one.
The Order of Operations
Three steps in a fixed sequence, and none of them can be reordered or skipped.
The first step is where employers create the worst problems for themselves. Running a case on somebody you have not hired is prohibited, and the reason it is tempting is exactly the reason it is prohibited: it lets an employer make a hiring decision on the basis of an immigration status check rather than on the job.
The second step is where the quality problem sits. E-Verify draws its data from the I-9, so a transposed number or a mis-entered name on the form becomes a mismatch downstream. Getting the I-9 documentation right first is what keeps the electronic step uneventful (I-9 Central).
The Three-Day Rule
The case must be created no later than the third business day after the employee starts work. The clock runs from the first day of employment, not from the offer, the acceptance, or the day the paperwork was finished.
Late cases are permitted but not free: the system requires you to select a reason for the delay, and that record sits in your own account. A pattern of late cases is exactly the sort of thing that gets noticed during a review, and the usual cause is administrative rather than deliberate, which makes it fixable.
The fix is to attach case creation to the start date in whatever process already tracks new hires, rather than to a person remembering. A first-day checklist that includes the I-9 and the E-Verify case together removes the entire category of problem, and it belongs with the rest of the new hire paperwork.
When There Is a Mismatch
This is where the risk actually lives. A mismatch means the data did not match the records checked, which is a very different statement from a finding that somebody is not authorised to work.
The rule that matters most is the second one. While a contested case is open you treat the employee exactly as you would have if the case had come back clear: same hours, same duties, same pay, same training. Reducing somebody's shifts while waiting is the action that converts an administrative process into a claim (E-Verify mismatch guidance).
The other thing worth internalising is that mismatches are common for entirely mundane reasons. Somebody who changed their name and never updated it with an agency will generate one, and so will a typing error at your end. Treating a mismatch as an accusation is both wrong and the first step toward handling it badly.
The Discrimination Trap
Every misuse of E-Verify has the same shape: applying it unevenly. The system is designed to be applied identically to every new hire, and any deviation from that reads as discrimination on national origin or citizenship status.
The specific behaviours to avoid are concrete rather than abstract. Do not verify some new hires and not others. Do not specify which acceptable documents somebody must produce. Do not request additional documents because a name, an accent, or an appearance prompted a question. Do not re-verify people whose documents have not expired. And do not pre-screen applicants.
The uncomfortable part for a small business is that these decisions are usually made by one person acting on instinct in a busy moment, without any policy in the room. Writing down that every new hire goes through the identical process, and putting the sequence on a checklist, removes the moment where instinct gets to operate.
Enrolling and Running It
Enrolment is free and takes an afternoon. The commitments that come with it are the part to read rather than skim.
Where Small Employers Get This Wrong
Six patterns, and the first two account for most enforcement exposure.
Acting on a contested mismatch is first. Cutting hours, delaying a start, or quietly moving somebody off the schedule while a case is open is the violation that turns a routine process into a claim.
Pre-screening applicants is second. It is prohibited outright, and it is the clearest possible evidence for a discrimination complaint.
Treating E-Verify as replacing the I-9 is third. The form obligation is unchanged, the retention rules are unchanged, and the inspection exposure is unchanged.
Verifying selectively is fourth. Enrolment is a commitment to run every new hire at the site through the same process, without exception and without judgment about who looks like they need it.
Missing the three-day window habitually is fifth. Individually forgivable, cumulatively a pattern visible in your own account record.
And assuming the state position is static is last. Legislatures revisit these mandates often, thresholds move, and a business that checked two years ago and concluded it was exempt may no longer be. An annual check costs ten minutes.
Frequently Asked Questions
What is E-Verify?
E-Verify is a federal electronic system that compares information from an employee’s Form I-9 against records held by the Department of Homeland Security and the Social Security Administration to confirm that the person is authorised to work in the United States. It runs after hiring rather than before, draws its data from a completed I-9, and returns either a confirmation of employment authorisation or a mismatch requiring follow-up. It supplements the I-9 process and does not replace it: enrolled employers still complete and retain every I-9.
Is E-Verify mandatory?
At federal level it is voluntary for most private employers, with one significant exception: federal contractors whose contracts contain the relevant clause must enrol and use it. Separately, around a dozen states require it for all or some private employers, and those state mandates are what actually bring most small businesses into the system. Some state requirements apply to every employer regardless of size, while others attach above an employee threshold that ranges from ten to well over a hundred.
Which states require E-Verify?
A group of roughly eleven states require it for all or most private employers, including Alabama, Arizona, Florida, Georgia, Louisiana, Mississippi, Montana, North Carolina, South Carolina, Tennessee, and Utah. The conditions differ substantially. Some apply to every employer regardless of headcount, several attach above a threshold such as ten, twenty-five, thirty-five, or a hundred and fifty employees, and a couple allow an alternative of retaining specified work authorisation documents instead. Other states impose narrower requirements on particular sectors, so confirm your own state and industry rather than relying on a national list.
When do you have to run an E-Verify check?
No later than the third business day after the employee starts work, and never before a job offer has been accepted. The case is created from the completed I-9, so the sequence is fixed: offer accepted, I-9 completed, E-Verify case created. Cases submitted late require the employer to state a reason for the delay, which becomes part of the record. Running a check on an applicant before hiring them is prohibited outright rather than merely discouraged.
Does E-Verify replace the I-9?
No, and this is the most consequential misunderstanding about it. Every employer, enrolled or not, must complete and retain a Form I-9 for each employee, and an enrolled employer remains subject to I-9 inspection exactly as before. E-Verify is an additional electronic check drawing on the information already recorded on the I-9. An employer who treats the electronic confirmation as the compliance step and lets I-9 quality slip has added an obligation without removing one.
What happens if E-Verify returns a mismatch?
A mismatch, historically called a tentative nonconfirmation, means the information entered did not match the records checked. It is not a finding that the person lacks work authorisation, and it frequently results from a data entry error, a name change, or records that were never updated with an agency. You must notify the employee promptly and privately, give them the notice the system produces, and let them decide whether to contest it. While a contested case is unresolved you may not terminate, suspend, reduce hours, delay training, or withhold pay.
Can you use E-Verify to screen job applicants?
No. Creating a case before a job offer has been made and accepted is prohibited, and pre-screening applicants is one of the clearest misuses of the system. The reasoning is straightforward: E-Verify draws on a completed I-9, and the I-9 process itself does not begin until somebody has been hired. Employers occasionally try to use it as a shortcut for evaluating candidates, and it produces both a system violation and a strong basis for a discrimination complaint.
Can you verify only some employees?
No. Once enrolled, you verify every new hire at the participating site, consistently, regardless of how they look, what they sound like, what documents they present, or where you believe they were born. Selective verification is discrimination and is treated as such. The same principle governs documents: you may not specify which acceptable documents an employee must produce for the I-9, and you may not demand extra documentation because a name or an accent prompted a question.