What Triggers an I-9 Audit?

An I-9 audit — formally called a Form I-9 inspection — is a review of an employer's completed I-9 forms by U.S. Immigration and Customs Enforcement (ICE) or the Department of Justice's Immigrant and Employee Rights Section (IER). It arrives without warning, and you have three business days to respond.

Talk to Bchex about I-9 management and audit preparation

Electronic completion, E-Verify integration, and audit-ready recordkeeping built for employers who can't afford to be unprepared.

What Is an I-9 Audit?

An I-9 audit — formally called a Form I-9 inspection — is a review of an employer's completed I-9 forms by U.S. Immigration and Customs Enforcement (ICE) or the Department of Justice's Immigrant and Employee Rights Section (IER). Employers are legally required to complete a Form I-9 for every employee hired after November 6, 1986, verifying their identity and authorization to work in the United States.

During an audit, an ICE agent delivers a Notice of Inspection (NOI) — a formal subpoena requiring the employer to produce all I-9 forms, payroll records, and other supporting documentation within three business days. The employer must comply. Refusal is not an option.

What Triggers an I-9 Audit?

There is no single trigger. ICE audits can be initiated through multiple channels:

Trigger	How common	What it means
Competitor or employee complaint	Common	Disgruntled competitors or former employees report suspected violations to ICE
Random selection	Moderate	ICE conducts random employer audits independent of any complaint
ICE initiative or industry sweep	Common	ICE targets specific industries or geographic areas for enforcement sweeps
DHS/E-Verify mismatch flags	Moderate	Repeated tentative nonconfirmations in E-Verify can trigger scrutiny
Related federal investigation	Less common	A criminal or immigration investigation of an individual employee can expand to an employer audit
Tip from a federal agency	Less common	Other agencies (DOL, IRS, CBP) can refer employers to ICE
Prior violation history	Less common	Employers with previous I-9 violations are at elevated risk for follow-up audits

You will not know an audit is coming. A Notice of Inspection arrives by certified mail, in person, or both — and the clock starts immediately.

What Does an I-9 Audit Cover?

ICE will examine every I-9 form your organization has on file. Auditors check for two categories of violations:

Substantive violations — errors at the heart of verification

Missing I-9 form entirely for a current employee
Accepting documents that don't establish both identity and work authorization
Knowingly accepting fraudulent documents
Missing Section 1 employee attestation
Missing employer certification in Section 2

Technical or procedural violations — correctable paperwork errors

Missing dates in Section 1 or 2
Employee failed to check citizenship/immigration status box
Employer failed to enter document title, issuing authority, document number, or expiration date
Missing List A, B, or C document information where required
Incorrect re-verification entries

Both categories carry penalties. Substantive violations are treated more seriously. Knowingly employing unauthorized workers carries the highest penalties and can result in criminal prosecution.

What Are the Penalties for I-9 Violations?

As of 2026, USCIS and ICE penalty amounts are adjusted annually for inflation. Current ranges:

Violation type	Penalty per violation (2026)
First offense — paperwork violations	$281 – $2,789
Second offense — paperwork violations	Higher range
First offense — knowingly hired unauthorized workers	$698 – $5,579
Second offense — knowing hire	$5,579 – $13,946
Third or more offense — knowing hire	$8,369 – $27,894
Pattern or practice violations	Criminal fines + up to 6 months imprisonment

Penalties are assessed per form, per violation. An employer with 200 employees and systematic paperwork errors can face penalties in the hundreds of thousands of dollars even without a single unauthorized worker on payroll.

How audit-ready is your screening program?Take the free screening assessment — a handful of questions, then a tailored view of where your compliance gaps are.

Start assessment

How to Prepare for an I-9 Audit Before One Arrives

The best time to prepare for an I-9 audit is before you receive a Notice of Inspection. An internal I-9 self-audit — conducted with legal counsel or a qualified compliance provider — identifies and corrects errors before ICE does.

Inventory all I-9 forms

Pull every I-9 for current employees and confirm one exists for each. For terminated employees, confirm forms are retained for the required period: three years from hire date or one year after termination, whichever is later.

Check for missing forms

Any current employee hired after November 6, 1986 without an I-9 on file is an immediate, serious violation. Address these before any audit arrives.

Review Section 1 for completeness

Confirm employee name, date of birth, SSN (where required), citizenship/immigration status attestation, and signature are all present and dated.

Review Section 2 for completeness

Confirm document titles, issuing authorities, document numbers, and expiration dates are recorded. Confirm the employer certification is signed and dated within three business days of the employee's start date.

Identify and correct technical errors

The USCIS I-9 Central guidance provides instructions on how to correct technical errors with a single line through the incorrect entry, the correct information, and the employer's initials and date. Do not use white-out. Do not backdate.

Document the self-audit

Create a written record of the review, what was found, and what corrections were made. This documentation demonstrates good-faith compliance effort — which ICE considers in penalty assessment.

Update your I-9 process going forward

Most I-9 errors are process problems, not intentional violations. Standardize your completion workflow, designate a trained I-9 coordinator, and consider electronic I-9 completion through a compliant platform to eliminate manual errors.

What Happens During an I-9 Audit

When an NOI arrives, here is what to expect:

1–3

You receive the Notice of Inspection

You have three business days to produce your I-9 forms, payroll records, list of current employees, and business license information. Contact legal counsel immediately.

ICE review period

ICE agents review your forms offsite. This can take days or weeks depending on the size of your workforce.

Findings notification — ICE issues one of several outcomes

Notice of Inspection Results — no violations found, audit closed
Notice of Suspect Documents — ICE believes specific employees may not be authorized; employer has opportunity to respond
Notice of Technical or Procedural Failures — employer has 10 days to correct technical errors
Warning Notice — violations found but below penalty threshold; employer must correct
Notice of Intent to Fine (NIF) — formal penalty assessment begins

At the NIF stage, employers can contest penalties through a hearing before an administrative law judge. Legal representation at this stage is strongly advisable.

How Bchex Supports I-9 Compliance

Bchex I-9 & E-Verify

Electronic I-9 completion that eliminates the manual errors behind most audit findings.

Bchex offers electronic I-9 completion and management services that eliminate the manual errors responsible for most audit findings. The platform guides employees and employers through each section of the form, enforces completion requirements in real time, and stores completed forms in a secure, audit-ready system.

For employers using E-Verify, Bchex integrates I-9 completion with E-Verify case creation — reducing the manual re-entry that creates data mismatches and compliance gaps.

For organizations preparing for a potential I-9 audit, Bchex can support the review process as part of a broader compliance program. Pairing compliant I-9 management with background checks and continuous employment monitoring creates the layered workforce compliance infrastructure that regulated employers need.

Real-time

Completion requirements enforced section by section

E-Verify

Integrated case creation — no manual re-entry

Audit-ready

Secure storage, retrievable within the 3-day window

FAQs: I-9 Audits for Employers

What triggers an I-9 audit?+

I-9 audits can be triggered by competitor or employee complaints to ICE, random selection, industry enforcement sweeps, E-Verify mismatch flags, related federal investigations, or prior violation history. Most audits arrive without advance warning via a Notice of Inspection delivered by certified mail or in person.

How much notice do employers get before an I-9 audit?+

Three business days — the amount of time you have to produce your I-9 forms and supporting documentation after receiving a Notice of Inspection. There is no advance warning before the NOI arrives. Preparation must happen before the audit, not after.

What are the penalties for I-9 violations?+

Paperwork violations currently range from $281 to $2,789 per violation. Knowingly employing unauthorized workers carries penalties of $698 to $27,894 per violation depending on offense history, plus potential criminal charges for pattern violations. Penalties are assessed per form, per violation — meaning systematic errors across a large workforce compound quickly.

Can employers correct I-9 errors before an audit?+

Yes — and they should. USCIS guidance provides specific instructions for correcting technical errors: draw a single line through the error, enter the correct information, and add your initials and date. Never use white-out or backdate a form. Conducting a self-audit and correcting errors in advance of an ICE audit demonstrates good-faith compliance, which ICE considers in penalty assessment.

How long must employers retain I-9 forms?+

For terminated employees: three years from the date of hire, or one year after the date of termination — whichever is later. For current employees: for the duration of employment plus the applicable retention period. Forms must be available for inspection within three business days of an ICE NOI.

Does using E-Verify protect employers from I-9 audits?+

E-Verify participation creates a rebuttable presumption that an employer acted in good faith when a hired employee turns out to be unauthorized — but it does not exempt employers from I-9 compliance requirements or from audit. Employers still must complete I-9 forms correctly. E-Verify supplements but does not replace the I-9 process.

What is the difference between a technical violation and a substantive violation?+

Technical violations are paperwork errors that are correctable — missing dates, incomplete document entries, unsigned but otherwise complete forms. Substantive violations go to the core of the verification process — missing forms entirely, accepting documents that don't establish work authorization, or knowingly hiring unauthorized workers. Both carry penalties, but substantive violations are treated significantly more seriously by ICE.

Conclusion

An I-9 audit arrives without warning and leaves no room for improvisation. The employers who fare best are the ones who treat I-9 compliance as an ongoing process — not a box checked at hire. A self-audit conducted now, before ICE arrives, is the most cost-effective compliance investment available. The alternative is paying $281 to $2,789 per paperwork violation discovered by someone else.