I-9 Documentation: What Small Business Employers Must Verify for Every Hire

The first time I hired an employee, I had no idea what I-9 documentation meant. The employee showed up on Day 1, I handed them a stack of paperwork, and when we got to Form I-9, I asked for a passport. She did not have one. I did not know what else to accept. I told her to bring something tomorrow. That was two mistakes in one sentence: I specified a document (illegal) and I missed the deadline for her to choose her own documents from the acceptable list.

Form I-9 is required for every employee hired in the United States, regardless of company size, citizenship status, or position. There is no minimum employee count. A sole proprietor hiring their first employee must complete it. A 50-person company hiring their 51st must complete it. The form itself takes 10 minutes, but the rules around which documents to accept, the 3-business-day deadline, what you can and cannot say, and how long to keep the forms are where most small business owners make expensive mistakes.

This guide covers exactly what I-9 documentation means, which documents are acceptable (List A, B, and C), how to complete Section 2 as the employer, the 3-day deadline, retention rules, reverification, and the penalties for getting it wrong. I built FirstHR to automate the document collection and e-signature workflow that I-9 compliance requires, including preboarding Section 1 completion, task workflow reminders for the 3-day deadline, and secure document storage with retention tracking.

What Is I-9 Documentation?

I-9 documentation refers to the documents that verify an employee's identity and authorization to work in the United States. The verification is done through Form I-9 (Employment Eligibility Verification), which every employer must complete for every employee hired after November 6, 1986.

Two critical rules to understand immediately. First, the employee chooses which documents to present. The employer cannot request specific documents, cannot require more documents than the form requires, and cannot reject documents that reasonably appear to be genuine. Second, the employer must examine original documents (not photocopies), but the employer is not required to be a document fraud expert. If the document reasonably appears genuine and relates to the person presenting it, the employer must accept it.

Who Must Complete Form I-9

If you misclassify an employee as a contractor and skip the I-9, you face both misclassification penalties and I-9 penalties when the error is discovered.

I-9 vs W-4, W-2, and W-9

Form I-9 is the only one of these four that has nothing to do with taxes. It is an immigration form: it proves the person is allowed to work, it stays in your files, and it is never sent to any agency. The W forms are IRS forms about money.

The mix-up is worth clearing because two of them arrive at the same moment. A new employee completes an I-9 and a W-4 in their first week. A contractor completes neither and hands you a W-9 instead.

One practical consequence. If you are handing a W-9 to someone whose shifts you schedule, stop and check the classification, because a worker who fills out a W-9 is being treated as a contractor. Get that call wrong and you owe a missing I-9 on top of the misclassification.

The tax side of new hire paperwork is a separate job with its own deadlines. The W-9 guide covers contractor collection, and the new hire tax forms guide walks through what an employee signs in week one.

Section 1 vs Section 2: Who Does What

Which Edition of the Form to Use, and Where Section 3 Went

Form I-9 is revised periodically, and using a retired edition is itself a violation. The edition date is printed in small type at the bottom of each page, and USCIS posts both the currently required edition and the date any prior edition stops being acceptable. Check that before you print a stack of blank forms or reuse a template saved in your onboarding system, because a form that was correct when you filed it away may not be correct when you hand it to someone.

The 2023 revision also renamed the parts of the form, which is why older guidance will not match the paper in front of you. What used to be called Section 3, used for reverification and for rehires within three years, is now Supplement B, a separate page you print only when you need it. The preparer and translator certification that used to sit at the bottom of Section 1 is now Supplement A. The substance did not change: reverification still goes on the reverification page, and anyone who helps an employee complete Section 1 still has to certify that they did. Only the labels moved. Where a checklist tells you to complete Section 3, complete Supplement B.

One more edition question comes up in practice. USCIS publishes a Spanish-language Form I-9, but it may only be completed and retained in place of the English form in Puerto Rico. Employers elsewhere may give an employee the Spanish version as a translation aid, and many should, but the form that gets signed and kept in the file has to be the English one.

Where to Get a Fillable or Printable Form I-9

Download it from USCIS and nowhere else. The form USCIS publishes is a fillable PDF, so you can type answers straight into the fields, and you can equally print the blank form and complete it by hand. Both are acceptable. What matters is that every page comes from the same edition.

One trap sits inside that fillable PDF. USCIS states that anyone using it must print the form and sign it by hand, because the fillable PDF does not meet the DHS standards for electronically generating, storing and retaining a Form I-9. Typing a signature into the field does not count as signing it.

A genuinely electronic I-9 has to come from a system built to those DHS standards, not from the downloaded PDF. Print at full size with the page numbers visible along the bottom, keep the completed pages together, and check the edition date printed on each page against the edition USCIS currently requires.

List A: Documents That Prove Both Identity and Work Authorization

If the employee presents a List A document, no other document is needed. One List A document satisfies both the identity and work authorization requirements. The USCIS Acceptable Documents page provides images of each document.

One recurring snag with the permanent resident card: it carries more than one number, and the obvious one is the wrong one. The USCIS Number, also written as the A-Number, is the nine-digit number on the front of cards issued since May 2010. A separate card number is printed on the back.

Section 2 asks for the document number of the card in front of you, so record the card number that identifies that particular card, copied character for character. Do not carry over the A-Number the employee wrote in Section 1, because the two fields ask for different things. The M-274 handbook pictures every card version.

List B: Documents That Prove Identity Only

If the employee does not present a List A document, they must present one List B document (identity) plus one List C document (work authorization).

List C: Documents That Prove Work Authorization Only

The USCIS Handbook for Employers (M-274) provides detailed guidance on each document including images and acceptable variations. When in doubt about a specific document, the M-274 is the definitive reference.

The 3-Business-Day Rule

The employer must complete Section 2 of Form I-9 (examining documents and signing the employer certification) within 3 business days of the employee's first day of work for pay. The first day of work is Day 1, not Day 0.

Receipts, Automatic Extensions, and the Short-Assignment Exception

The three-business-day rule has an exception that catches employers hiring for short jobs. If the person will be employed for fewer than three business days, Section 2 has to be completed no later than the first day of employment. A two-day event crew, a one-day temp and a weekend seasonal hire all have to be fully verified before the end of Day 1, and the usual receipt workaround is not available to them.

For everyone else, the receipt rule covers the employee who arrives without a document. A receipt showing the employee has applied to replace a document that was lost, stolen or damaged is acceptable in place of the document itself. Record the receipt in Section 2; the employee then has 90 days from the hire date to present the actual document, at which point you update the form. Two other things count as receipts and behave differently: a Form I-94 containing a temporary I-551 stamp, valid until the stamp's expiration date, and a Form I-94 with a refugee admission stamp, valid for 90 days, after which the person presents either an Employment Authorization Document or a List B document plus an unrestricted Social Security card. A receipt for a document the employee never held is not a receipt; the rule covers replacements only.

Expiring EADs are the other place small employers get stuck. Certain categories of renewal applicant remain work-authorized past the date printed on the card, evidenced by the expired EAD together with the Form I-797C receipt notice for the renewal application. The length of that automatic extension has been changed by rulemaking more than once, so look up the current period on the USCIS automatic extension page before you reverify and, above all, before you take anyone off the schedule. Removing an employee who is still authorized because their card shows a past date is a wrongful termination exposure and a discrimination claim at the same time.

Employer Responsibilities When Examining Documents

Verifying Documents for a Remote Hire

The physical examination requirement is the part of the I-9 that collides hardest with distributed hiring, and there are exactly two lawful ways through it.

The first is the authorized representative. You may designate any person to examine the employee's original documents in person on your behalf and to complete and sign Section 2. There is no credential requirement: it can be a colleague near the employee, a staffing partner, a family friend, or a notary. Two things matter. The representative signs Section 2 in their own name rather than yours, and liability for anything they get wrong stays entirely with you. Notaries are a common choice because they are easy to find, but a notary acting as your authorized representative is acting as your agent rather than notarizing anything, some states regulate what notaries may do in immigration-related matters, and the form should not carry a notary seal.

The second path is the alternative procedure DHS authorized in 2023, which permits examination over live video instead of in person. It is not open to every employer: it is available only to those enrolled in E-Verify and in good standing, and it has to be offered consistently rather than only to employees you find inconvenient to meet. Under it, the employee transmits copies of the front and back of their documents, you examine the originals over a live video interaction with the employee holding them, you retain copies of every document presented, and you check the box on Form I-9 indicating the alternative procedure was used. Skipping the checkbox or the retained copies turns a compliant remote verification back into a paperwork violation.

If you are not enrolled in E-Verify, the alternative procedure is not available to you, and a video call is not a substitute for someone examining the originals in person. That is the single most common misunderstanding in remote onboarding, and it produces a form that looks complete and is not.

If you are using an authorized representative, send them something in writing. Most of the errors that come back on a remotely completed Section 2 are not judgment calls. They are a representative who signed in the employer's name, asked the employee for a passport, or kept photocopies nobody asked for. The sheet below travels with the form.

What You Cannot Do (Anti-Discrimination Rules)

The anti-discrimination rules are enforced by the Immigrant and Employee Rights Section (IER) of the Department of Justice, not by USCIS. Penalties for document abuse and unfair documentary practices are separate from and in addition to I-9 form violations.

How Long to Keep I-9 Forms

The retention formula: keep the I-9 for 3 years after the date of hire or 1 year after the date of termination, whichever is later.

ICE can request I-9 forms for all current employees with 3 business days notice. If you cannot produce a form, it is treated as a violation.

When to Reverify (Section 3)

Watching those expiry dates is a standing job rather than a filing question, and it needs its own sheet listing only the employees whose authorization actually runs out. The work authorization guide carries an expiration tracker built for it, with the reminder date, the renewal filing, and the automatic extension period recorded alongside each expiry.

Penalties for I-9 Violations

The penalty amounts are adjusted annually for inflation. The figures above reflect current enforcement levels. Penalties are assessed per form, meaning a company with 20 I-9 violations could face $5,760 to $57,220 in fines from form errors alone. The E-Verify program is an additional verification step that some states require; it does not reduce I-9 penalties but may demonstrate good-faith compliance.

What an ICE Audit Looks Like, and How to Fix Errors First

An inspection begins with a Notice of Inspection, and you have three business days to produce the forms it demands along with whatever supporting payroll records the notice lists. Three days is not enough time to locate forms you have never organized, which is the practical reason to keep I-9s in one separate binder or folder rather than scattered through personnel files.

What comes back is a set of notices rather than a single bill. A Notice of Technical or Procedural Failures identifies errors you are allowed to cure, and you get ten business days to correct them; cured technical errors are not fined. A Notice of Suspect Documents identifies employees the agency believes are not work-authorized. A Notice of Discrepancies means status could not be confirmed from what you provided. Substantive violations, such as a Section 2 certification that was never signed or a form that does not exist at all, cannot be cured and move straight toward a Notice of Intent to Fine. That distinction matters more than the raw error count: a stack of forms missing an address is fixable, and a stack of forms missing the employer certification is not.

Where a fine lands inside the published range is decided by weighing five factors: the size of the business, the employer's good faith, the seriousness of the violations, whether unauthorized workers were actually involved, and any history of previous violations. Small size and demonstrated good faith both cut in your favor, which is most of the argument for auditing yourself first.

Run that audit on a neutral basis: every form, or a sample chosen by something that has nothing to do with who your employees are. Correcting has its own etiquette. Draw a single line through the wrong entry, write the correct information next to it, then initial and date the change with the date you are actually making it. Never use correction fluid, never overwrite an entry, and never write a date earlier than today. If a form is missing entirely, complete a new one now, use the current date for the employer certification, and attach a short memo recording when the gap was found and why the date is current. Backdating is the one mistake that turns a civil paperwork problem into an allegation of fraud, and it is easy to detect because the ink and the form edition rarely match the date claimed.

The memo is what makes a late form read as a correction rather than a cover-up. Write one for every gap you close during a self-audit, attach it to the form, and keep it with the I-9 rather than in the personnel file.

Common I-9 Mistakes at Small Businesses

Frequently Asked Questions