I-9 Audits and Compliance

An ICE I-9 audit begins with a Notice of Inspection, and once it arrives, an Illinois employer has only three business days to produce every Form I-9, payroll record, and employee list requested. As of January 2025, paperwork violations run $288 to $2,861 per form, and knowingly employing an unauthorized worker can reach $28,619 per worker. A March 2026 rule change reclassified more than ten previously correctable errors as immediately fineable. For employers, the safest move now is a privileged internal audit before that notice ever shows up.

What is an I-9?

Form I-9 is used to verify and identify the employment authorization of those employed in the United States. All U.S. employers must complete Form I-9 for each individual they hire. I-9 Forms must be signed by both the employer and the employee.

Why I-9 Enforcement Changed in 2025 and 2026

For nearly thirty years, a missing signature or a date in the wrong box was a “technical” error — the kind an employer could fix during a 10-day cure period after an audit flagged it. That cushion is largely gone.

On March 16, 2026, ICE revised its Form I-9 Inspection fact sheet and moved more than ten common error categories from correctable technical violations to substantive violations subject to immediate per-form fines. The reasoning behind the shift matters: ICE is now treating process failures — not just blank fields — as the violation itself. A weak audit trail in an electronic I-9 system, an improper electronic signature, or use of the remote verification procedure without active E-Verify participation are each treated as a fineable failure on their own.

This is why “we’ll fix it if they find something” no longer works as a compliance strategy. Many of the errors ICE now penalizes can’t be cured after the fact. The only reliable protection is catching them before an inspection.

What an I-9 Audit Actually Looks Like

An audit is run by Homeland Security Investigations, the division of ICE that handles worksite enforcement. It can be triggered by a tip, by industry targeting, or by random selection — no probable cause is required, which is why employers with no red flags still receive notices.

The sequence is consistent:

1. The Notice of Inspection arrives. You have three business days to hand over all Form I-9s plus payroll data and a roster of current and former employees.
2. ICE reviews the forms. Agents look for two distinct problems — paperwork violations (missing fields, unsigned sections, wrong dates) and substantive violations (no form on file, unauthorized workers, improper remote verification).
3. A Notice of Suspect Documents may follow. If documents appear fraudulent or mismatched, you receive a second notice with a short deadline to respond before further action.
4. Fines are assessed. Civil penalties apply per form for paperwork errors and per worker for unauthorized employment. A pattern of knowingly hiring unauthorized workers can also escalate into criminal exposure.

Because the federal data-sharing environment has expanded — investigators now reach employment and tax records they previously couldn’t — the agency is running more inspections than at any point in recent history.

The Errors That Now Cost Money Immediately

Under the March 2026 reclassification, several mistakes that employers long treated as harmless now carry per-form fines with no correction window:

• A missing employer or employee signature in any section
• An incorrect or missing hire date, citizenship attestation, or status selection
• Failure to reverify work authorization when a time-limited document expires
• Using remote document verification without being an active, good-standing E-Verify participant
• Failing to check the alternative-procedure box when remote verification was used
• Electronic I-9 systems lacking proper audit trails, signature protocols, or DHS-standard security documentation
• Keeping expired form versions in use past the deadline

That last point has a hard date. USCIS released a revised Form I-9 in January 2025; the older August 2023 edition stays valid only through July 31, 2026. Switching to the current version now closes one of the easiest violations for an inspector to spot.

Correcting Errors the Right Way

When errors surface — ideally during your own review rather than an inspection — the correction method is specific. Draw a single line through the wrong entry, write the correct information nearby, then initial and date the change. Never use correction fluid, never erase, and never alter a form in a way that hides the original entry.

The catch under current guidance is that some errors no longer qualify for self-correction once an audit is underway. Attempting to “clean up” files improperly after a notice arrives can itself create the appearance of bad faith. This is the point where employers benefit from counsel before touching the records, because how a correction is documented can matter as much as the correction itself. Our attorneys advise on I-9 compliance for employers so that good-faith corrections strengthen your position rather than complicate it.

Retention and Storage Rules

Completed I-9 forms must be kept for three years from the hire date or one year from the end of employment — whichever is later. Store them separately from general personnel files so they can be produced quickly, and be ready to deliver them within three business days of any inspection request.

Both paper and electronic storage are allowed. But electronic systems now have to meet DHS audit-trail and security standards, and inspectors are actively reviewing those systems rather than waving them through. If your I-9s live in an HR platform, confirm it documents who completed each form, when, and how.

How Illinois Employers Should Prepare Now

A documented history of good-faith compliance can reduce penalties if violations are later found — which makes the proactive audit both a shield and a mitigation tool. Practical steps:

• Review every current employee’s I-9 for completeness and accuracy
• Confirm terminated-employee forms are retained for the required period
• Verify your electronic I-9 system meets current DHS standards
• Move to the January 2025 form version and retire older editions
• Train HR staff on the updated requirements and the remote-verification rules
• Set a recurring internal audit schedule rather than a one-time cleanup

Worksite enforcement frequently arrives alongside unannounced worksite site visits, so I-9 readiness and broader compliance planning belong in the same conversation. Pairing your audit with a working E-Verify enrollment also matters, since remote document review is only available to active E-Verify participants.

You can review the federal procedures directly through ICE’s worksite enforcement resources, but the inspection process moves fast enough that having counsel engaged before a notice arrives is what protects most businesses.

Frequently Asked Questions About I-9 Audits

How long do I have to respond to a Notice of Inspection?

Three business days from the date the notice is served. There is no standard extension. Every requested Form I-9, along with payroll records and employee lists, must be produced within that window, which is why employers who wait until a notice arrives are almost always behind.

What are the current I-9 penalty amounts?

As of the January 2025 federal adjustment, paperwork violations run $288 to $2,861 per form, and knowingly hiring or continuing to employ an unauthorized worker can reach $28,619 per worker, with higher amounts for repeat offenses. These remain the figures in effect through 2026.

Do I have to submit Form I-9 to the government?

No. The form is never filed with USCIS or any agency. You complete it, retain it, and produce it only when a federal inspector requests it.

Can my business use remote document verification?

Only if you are an active, good-standing E-Verify participant at the time of verification. Using the remote procedure without meeting that condition — or failing to check the alternative-procedure box — is now treated as a substantive violation rather than a minor paperwork issue.

Why would ICE audit my company if we’ve done nothing wrong?

Audits are triggered by tips, industry targeting, or random selection, and no probable cause is required. Employers with clean histories receive notices regularly, which is why a documented internal audit is worth doing before any inspection.

Contact an Immigration Lawyer Today

At Scott D. Pollock & Associates, P.C., we are experienced in I-9 compliance for employers. If you are an employer seeking legal assistance with I-9 Audits, contact our Chicago immigration attorneys today. Contact a member of our team at 312.444.1940.