I-9 Documentation: What Small Business Employers Must Verify for Every Hire

The first time I hired an employee, I had no idea what I-9 documentation meant. The employee showed up on Day 1, I handed them a stack of paperwork, and when we got to Form I-9, I asked for a passport. She did not have one. I did not know what else to accept. I told her to bring something tomorrow. That was two mistakes: I specified a document, which USCIS says an employer cannot do, and I never showed her the Lists of Acceptable Documents so she could choose her own.

Form I-9 is required for every employee hired in the United States, regardless of company size, citizenship status, or position. There is no minimum employee count. A sole proprietor hiring their first employee must complete it. A mid-size company adding one more hire must complete it too.

The form itself is not the hard part: the instructions from US Citizenship and Immigration Services (USCIS) estimate 34 minutes per response by hand, reading time included. The rules around which documents to accept, the 3-business-day deadline, what you can and cannot say, and how long to keep the forms are where most small business owners make expensive mistakes.

This guide covers what I-9 documentation means, which documents are acceptable (List A, B, and C), how to complete Section 2 as the employer, the 3-day deadline, retention rules, reverification, and the penalties for getting it wrong. I built FirstHR to take the chasing out of new hire paperwork: onboarding task workflows that put Section 1 on the pre-boarding list for each new hire, a task with a deadline for your own Section 2 review, and secure document storage for the rest of the hiring file.

What Is I-9 Documentation?

I-9 documentation refers to the documents that verify an employee's identity and authorization to work in the United States. The verification is done through Form I-9 (Employment Eligibility Verification), which every employer must complete for every employee hired after November 6, 1986.

Two rules matter from the first day. First, the employee chooses which documents to present. You cannot request specific documents, cannot require more documents than the form requires, and cannot reject documents that reasonably appear to be genuine.

Second, you must examine original documents (not photocopies), but you are not required to be a document fraud expert. If a document reasonably appears genuine and relates to the person presenting it, you must accept it.

Who Must Complete Form I-9

Every employee hired after November 6, 1986 needs one, whether they work full time, for a single day, as a minor, or from home. A true independent contractor does not.

If you misclassify an employee as a contractor and skip the I-9, you face both misclassification penalties and I-9 penalties when the error is discovered.

I-9 vs W-4, W-2, and W-9

Form I-9 is the only one of these four that has nothing to do with taxes. It is an immigration form: it proves the person is allowed to work, it stays in your files, and it is never sent to any agency. The W forms are Internal Revenue Service (IRS) forms about money.

The mix-up is worth clearing because two of them arrive at the same moment. A new employee completes an I-9 and a W-4 in their first week. A contractor completes neither and hands you a W-9 instead.

That has one practical consequence: if you are handing a W-9 to someone whose shifts you schedule, stop and check the classification, because a worker who fills out a W-9 is being treated as a contractor. Get that call wrong and you owe a missing I-9 on top of the misclassification.

The tax side of new hire paperwork is a separate job with its own deadlines. The W-9 guide covers contractor collection, and the new hire tax forms guide walks through what an employee signs in week one.

Section 1 vs Section 2: Who Does What

The form splits the work between two people: the employee fills in the first section, and you, as the employer, complete the second.

Which Edition of the Form to Use, and Where Section 3 Went

Use the edition USCIS currently requires. Form I-9 is revised periodically, and USCIS has warned that employers who fail to use a required edition may be subject to penalties under section 274A of the Immigration and Nationality Act (INA).

The edition date is printed in small type at the bottom of each page, and USCIS posts both the currently required edition and the date any prior edition stops being acceptable. Check both before you print a stack of blank forms or reuse a template saved in your onboarding system, because a form that was correct when you filed it away may not be correct when you hand it to someone.

The 2023 revision also renamed the parts of the form, which is why older guidance will not match the paper in front of you. What used to be called Section 3, used for reverification and for rehires within three years, is now Supplement B, a separate page you print only when you need it. The preparer and translator certification that used to sit at the bottom of Section 1 is now Supplement A.

The substance did not change: reverification still goes on the reverification page, and anyone who helps an employee complete Section 1 still has to certify that they did. Only the labels moved, so where a checklist tells you to complete Section 3, complete Supplement B.

Reverification and rehire entries no longer go in the body of the form at all. USCIS treats Supplement B as its own step in its Handbook for Employers, the M-274, and that chapter is also where the handbook records that reverification is never required for US citizens or noncitizen nationals.

One more edition question comes up in practice. USCIS publishes a Spanish-language Form I-9, but it may only be completed and retained in place of the English form in Puerto Rico. Employers elsewhere may give an employee the Spanish version as a translation aid, and many should, but the form that gets signed and kept in the file has to be the English one.

Where to Get a Fillable or Printable Form I-9

Download it from USCIS and nowhere else. The form USCIS publishes is a fillable PDF, so you can type answers straight into the fields, and you can equally print the blank form and complete it by hand. Both are acceptable. What matters is that every page comes from the same edition.

One trap sits inside that fillable PDF. USCIS states that employers and employees using this fillable form must print and manually sign it rather than typing or electronically affixing a signature, because the fillable form does not meet Department of Homeland Security (DHS) standards for electronic Form I-9 generation, storage, and retention systems. Typing a signature into the field does not count as signing it.

A genuinely electronic I-9 has to come from a system built to those DHS standards, not from the downloaded PDF. Print at full size with the page numbers visible along the bottom, keep the completed pages together, and check the edition date printed on each page against the edition USCIS currently requires.

List A: Documents That Prove Both Identity and Work Authorization

If the employee presents a List A document, no other document is needed: that one document satisfies both the identity and the work authorization requirement. The USCIS Acceptable Documents page provides images of each document.

One recurring snag with the permanent resident card: it carries more than one number. USCIS defines the USCIS Number, also written as the A-Number, as a unique nine-digit number assigned by the Department of Homeland Security and shown on the front of cards issued after May 10, 2010. A separate number identifying the physical card is printed elsewhere on it.

To record the right one, read the field labels on the edition of Form I-9 in front of you and copy each number character for character from the card, rather than working from what the employee wrote in Section 1. The M-274 pictures every card version, which is the fastest way to settle an argument about which number a particular card is showing you.

List B: Documents That Prove Identity Only

If the employee does not present a List A document, they must present one List B document (identity) plus one List C document (work authorization).

List C: Documents That Prove Work Authorization Only

A List C document proves only that the employee is allowed to work, so it normally travels with a List B document that proves who they are.

The USCIS Handbook for Employers (M-274) provides detailed guidance on each document, including images and acceptable variations. When in doubt about a specific document, the M-274 is the definitive reference.

The 3-Business-Day Rule

The employer must complete Section 2 of Form I-9, meaning examine the documents and sign the employer certification, within 3 business days of the date employment begins. The first day of work itself does not consume one of those 3 days.

USCIS spells the count out in the Handbook for Employers (M-274): if an employee begins employment on Monday, you must review the documentation and complete Section 2 on or before Thursday of that week. For a business closed on weekends, a Thursday start runs to the following Tuesday.

The handbook does not define a business day, so a business that operates on weekends is safest treating those days as business days and finishing sooner. The table below assumes a Monday-to-Friday schedule.

Receipts, Automatic Extensions, and the Short-Assignment Exception

The three-business-day rule has an exception that catches employers hiring for short jobs. If the person will be employed for fewer than three business days, Section 2 has to be completed no later than the first day of employment. A two-day event crew, a one-day temp, and a weekend seasonal hire all have to be fully verified before the end of Day 1, and the usual receipt workaround is not available to them.

For everyone else, the receipt rule covers the employee who arrives without a document. A receipt showing the employee has applied to replace a document that was lost, stolen, or damaged is acceptable in place of the document itself.

Record the receipt in Section 2 when it is presented. The employee then has 90 days from the hire date to present the actual document, at which point you update the form. The rule covers replacements only: a receipt for a document the employee never held is not a receipt.

Two other things count as receipts and behave differently. A Form I-94 containing a temporary I-551 stamp is valid until the stamp's expiration date. A Form I-94 with a refugee admission stamp is valid for 90 days, after which the person presents either an Employment Authorization Document or a List B document plus an unrestricted Social Security card.

Expiring EADs are the other place small employers get stuck, and the rule changed underneath most published guidance. Under a DHS interim final rule effective October 30, 2025, a renewal application on Form I-765 filed on or after that date no longer earns the automatic extension of up to 540 days. The receipt notice alone buys the employee nothing.

Renewals timely filed before October 30, 2025 keep their extension. In eligible categories the employee shows the expired EAD together with the Form I-797C receipt notice, and remains work-authorized past the date printed on the card.

Check the EAD category list and the filing date before you reverify and, above all, before you take anyone off the schedule. Removing an employee who is still authorized because their card shows a past date is a wrongful termination exposure and a discrimination claim at the same time.

Employer Responsibilities When Examining Documents

Examining the documents is your half of the form, and it comes down to five steps.

Verifying Documents for a Remote Hire

The physical examination requirement is the part of the I-9 that collides hardest with distributed hiring, and there are exactly two lawful ways through it.

The first is the authorized representative. You may designate any person to examine the employee's original documents in person on your behalf and to complete and sign Section 2. There is no credential requirement: it can be a colleague near the employee, a staffing partner, a family friend, or a notary. Two things matter. The representative signs Section 2 in their own name rather than yours, and liability for anything they get wrong stays entirely with you.

Notaries are a common choice because they are easy to find. A notary serving as your authorized representative is acting as your agent rather than notarizing anything, some states regulate what notaries may do in immigration-related matters, and the form should not carry a notary seal.

The second path is the alternative procedure DHS authorized in 2023, which permits examination over live video instead of in person. It is not open to every employer: it is available only to those enrolled in E-Verify and in good standing. Once you offer it at a hiring site, you have to offer it to every new employee there, although USCIS lets you limit it to remote hires as long as that choice is not discriminatory.

Under the alternative procedure, the employee transmits copies of the front and back of their documents, you examine the originals over a live video interaction with the employee holding them, you retain copies of every document presented, and you check the box on Form I-9 indicating the alternative procedure was used. Skipping the checkbox or the retained copies turns a compliant remote verification back into a paperwork violation.

If you are not enrolled in E-Verify, the alternative procedure is not available to you, and a video call is not a substitute for someone examining the originals in person. That is the single most common misunderstanding in remote onboarding, and it produces a form that looks complete and is not.

If you are using an authorized representative, send them something in writing. Most of the errors that come back on a remotely completed Section 2 are not judgment calls. They are a representative who signed in the employer's name, asked the employee for a passport, or kept photocopies nobody asked for. The sheet below travels with the form.

What You Cannot Do (Anti-Discrimination Rules)

Every rule here comes down to one principle: each new hire gets the same process and the same free choice of documents.

The anti-discrimination rules are enforced by the Immigrant and Employee Rights Section (IER) of the Department of Justice, not by USCIS. IER covers citizenship status discrimination, national origin discrimination, unfair documentary practices during verification, and retaliation. Its penalties are separate from and in addition to I-9 form violations.

Good intentions are not a defense here. The Justice Department defines discrimination under this law as intentionally treating someone differently because of national origin or citizenship status, whatever the explanation and whether or not animus (ill will) played any part. Asking only the hires you assume are immigrants for a green card, however kindly meant, fits that definition.

How Long to Keep I-9 Forms

The retention formula sits in the Code of Federal Regulations at 8 CFR 274a.2: keep the I-9 for 3 years after the date of hire or 1 year after the date of termination, whichever is later.

ICE can request I-9 forms for all current employees with at least 3 business days' notice. If you cannot produce a form, it is treated as a violation.

When to Reverify (Supplement B)

Reverify only when an employee's temporary work authorization expires, and record the new document on Supplement B.

Watching those expiry dates is a standing job rather than a filing question, and it needs its own sheet listing only the employees whose authorization actually runs out. The work authorization guide carries an expiration tracker built for it, with the reminder date, the renewal filing, and the automatic extension period recorded alongside each expiry.

Penalties for I-9 Violations

Every penalty below is charged for each individual, worker, or document involved, and the ranges for hiring unauthorized workers climb with each repeat order.

The paperwork and unauthorized-worker figures come from 8 CFR 274a.10. The unfair documentary practices range is a Justice Department figure published at 28 CFR 85.5, applying to penalties assessed after July 3, 2025. Document fraud has its own civil schedule in 8 CFR 270.3, charged for each fraudulent document, and it can be prosecuted as a crime on top of that.

These amounts are normally adjusted for inflation every January. The 2026 adjustment was not made. The Office of Management and Budget told agencies to skip it after the autumn 2025 shutdown stopped publication of the October Consumer Price Index for All Urban Consumers (CPI-U), so the figures above are the ones in force.

Because paperwork penalties are assessed per individual, a company with violations on 20 employees' forms could face $5,760 to $57,220 in fines from form errors alone.

The E-Verify program is an additional verification step that some states and federal contracts with the FAR E-Verify clause require. It does not replace Form I-9 or excuse errors on it. When both procedures are followed properly, a case that confirms employment eligibility gives the employer a rebuttable presumption that it did not knowingly hire an unauthorized worker.

What an ICE Audit Looks Like, and How to Fix Errors First

An ICE inspection begins with a Notice of Inspection, and you have at least three business days to produce the forms it demands along with whatever supporting payroll records the notice lists. Three days is not enough time to locate forms you have never organized, which is the practical reason to keep I-9s in one separate binder or folder rather than scattered through personnel files.

What comes back is a set of notices rather than a single bill. A Notice of Technical or Procedural Failures identifies errors you are allowed to cure, and you get at least ten business days to correct them; cured technical errors are not fined.

Two other notices are about the workers rather than the paperwork. A Notice of Suspect Documents identifies employees the agency believes are not work-authorized. A Notice of Discrepancies means status could not be confirmed from what you provided.

Substantive violations, such as a Section 2 certification that was never signed or a form that does not exist at all, cannot be cured and move straight toward a Notice of Intent to Fine. That distinction matters more than the raw error count: a stack of forms missing an address is fixable, and a stack of forms missing the employer certification is not.

Where a fine lands inside the published range is decided by weighing five factors: the size of the business, the employer's good faith, the seriousness of the violations, whether unauthorized workers were actually involved, and any history of previous violations. Small size and demonstrated good faith both cut in your favor, which is most of the argument for auditing yourself first.

Run that audit on a neutral basis: every form, or a sample chosen by something that has nothing to do with who your employees are. When you find an error, draw a single line through the wrong entry, write the correct information next to it, then initial and date the change with the date you are actually making it.

Never use correction fluid, never overwrite an entry, and never write a date earlier than today. Backdating is the one mistake that turns a civil paperwork problem into an allegation of fraud, and it is easy to detect because the ink and the form edition rarely match the date claimed.

If a form is missing entirely, complete a new one now, use the current date for the employer certification, and attach a short memo recording when the gap was found and why the date is current.

The memo is what makes a late form read as a correction rather than a cover-up. Write one for every gap you close during a self-audit, attach it to the form, and keep it with the I-9 rather than in the personnel file.

Common I-9 Mistakes at Small Businesses

Almost every mistake in that table has the same cure: one written process that every new hire goes through. Hand each person the Lists of Acceptable Documents, get the employee's half of the form done during preboarding, examine the originals and sign your half inside the three business days, and file the finished form in its own folder, away from personnel files.

Frequently Asked Questions