Every hire in the United States runs through Form I-9, and the I-9 is the employer's first and most important defense against immigration enforcement action. The stakes aren't abstract. ICE workplace enforcement audits climbed sharply through 2025 and continued into 2026, with civil penalties for knowingly hiring unauthorized workers reaching $27,018 per worker for repeat violations. For HR and operations teams, the work is less about catching undocumented workers and more about running an I-9 process that holds up when an auditor arrives with three days' notice.
What Federal Law Actually Says The Immigration Reform and Control Act of 1986 (IRCA) prohibits employers from knowingly hiring or continuing to employ a person without work authorization. The statute requires every employer to complete Form I-9 for each new hire within three business days of the start date. IRCA also prohibits national origin and citizenship-status discrimination, which creates a separate enforcement track at the DOJ's Immigrant and Employee Rights Section.
The word "knowingly" carries weight. Employers who follow the I-9 process in good faith generally avoid knowing-violation penalties, but they can still face paperwork violations that carry their own fines.
How Work Authorization Gets Verified Form I-9 asks for documents from List A (establishing both identity and work authorization, like a U.S. passport) or a combination of List B (identity) and List C (work authorization). Employers review the documents, record the information, and sign attesting the documents appeared genuine and related to the employee.
E-Verify, the federal electronic verification system, adds a second layer. Some states mandate E-Verify for most employers; federal contractors have required it since 2009.
What If a Document Looks Forged? Employers aren't document experts and aren't expected to catch sophisticated forgeries. They are expected to refuse documents that obviously aren't genuine or don't match the person presenting them. Refusing every document from applicants with accents or foreign-sounding names is illegal discrimination.
What Penalties Look Like in 2026 Paperwork violations start at $281 per form and escalate for patterns of noncompliance. Knowing-hire penalties start at $698 per worker for a first offense and climb to $27,018 per worker for repeat offenders. Criminal penalties apply to patterns of violations and to employers who engage in document fraud or harbor unauthorized workers.
State-level penalties stack on top, including possible business license suspension in states that have added their own enforcement regimes.
Keeping Your I-9 and Work Authorization Process Audit-Ready Centralize I-9 storage separately from personnel files so an auditor can access only the relevant documents. Run internal I-9 audits annually to catch missing sections, expired document re-verifications, and inconsistent completion across locations.
Train managers never to ask about immigration status beyond the I-9 process, which itself is a separate discrimination risk. Review the USCIS I-9 Central resources each year and the ICE worksite enforcement guidance for current audit and penalty information. Coordinate immigration compliance with onboarding and background check processes so documentation lands cleanly in the applicant file without creating a paper trail vulnerable to discovery.