Most business owners know they're supposed to collect an I-9 when they hire someone. What a lot of them don't realize is how easy it is to get it wrong, and how expensive that mistake has gotten.
On March 17, 2026, Immigration and Customs Enforcement issued new guidance that changed the enforcement landscape significantly. Errors that used to result in a simple correction notice now carry fines. And those fines run from $288 to $2,861 per form.
If you've got payroll compliance gaps, this is a good time to find them before ICE does.
The I-9 verifies that every person you hire is legally authorized to work in the United States. As an employer, you're required to collect it for every new hire, no exceptions. The form confirms who the person is, that their documents check out, and that you've actually looked at those documents yourself.
That last part matters more than people think. The I-9 isn't just paperwork you collect and file. It's a process. The form in your hand is supposed to match the documents in front of you. If it doesn't, or if you can't prove you verified it, you're not compliant.
Here's a scenario that happens more than you'd expect. You hire someone, hand them a paper onboarding packet on their first day, and they fill everything out. Your HR or payroll person enters the information into your system. Six months later, the employee comes back and says their W-2 has the wrong Social Security number.
You pull the original form. The handwriting is messy, a seven that looks like a nine, or vice versa. You issue a corrected W-2. But here's the problem: if the Social Security number on the I-9 doesn't match what was verified, you've got a compliance failure. Not because you were trying to cut corners. Because paper onboarding made it easy for a simple transcription error to slip through.
Electronic onboarding eliminates most of this. When employees enter their own information on a screen, they're typing it themselves. You're not trying to read handwriting. The numbers are clear. It's not foolproof, but it removes one of the most common ways these errors happen.
You have three business days from an employee's first day of work to complete I-9 verification. Not three days from when you get around to it. Three days from when they start.
A good payroll platform with an I-9 compliance dashboard will track this for you. Enter the employee's start date and the system will flag the verification deadline. Miss that window and you're out of compliance, regardless of whether everything else on the form is correct.
A lot of employers used to handle this by having employees fill out the I-9 on their first day and calling it done. That's no longer enough. Filling out the form and you verifying the documents are two different steps, and both have to happen within that window.
If you're hiring remotely, the rules are stricter than most employers realize, and recent enforcement has made this clearer.
Sending someone a paper form to fill out, scan, and email back is not I-9 compliant. A scanned copy of their driver's license isn't sufficient on its own either. For remote hires, you are required to do a live, remote examination. That means you need to actually see the employee and their documents in real time, verify that the person matches the documents, and record that examination so you can prove it happened.
That means a video call where you're looking at their driver's license and Social Security card, confirming the information matches your I-9, and keeping a record of that session. It sounds like a lot, but a good payroll system makes this manageable. You can upload the recording, store the document copies, and keep everything tied to the employee's record in one place.
This is the part of I-9 compliance that caught a lot of employers off guard.
Prior to March 17, 2026, ICE distinguished between two categories of violations: Technical and Substantive. Technical violations were minor paperwork errors, a missing date, a blank field, something an employer could correct without penalty. Substantive violations were the serious ones that triggered fines.
ICE changed that. A significant list of errors that were previously considered Technical are now classified as Substantive. That means they carry fines, starting at $288 and going up to $2,861 per form.
The newly reclassified violations include:
If you looked at that list and recognized a few items from your current I-9 forms, you're not alone. These are common gaps, things that used to result in a correction letter. Under the current guidance, they result in fines.
The fine structure is per occurrence. Every I-9 with a qualifying violation is a separate fine.
For a business with steady hiring, seasonal staff, part-timers, and high turnover, the exposure stacks up quickly. Hire 30 summer employees without a tight process, have a common error across those forms, and you're looking at potentially $8,000 to $85,000 in fines before you even know you have a problem.
The fine range itself also scales. First-time violations with no aggravating factors land closer to the $288 floor. Repeat violations, patterns of non-compliance, or cases where ICE determines you failed to make a good-faith effort push toward the $2,861 ceiling. The worse your records look and the more it happens, the higher each per-form penalty climbs.
The fine floor isn't what makes this dangerous. It's the volume.
What ICE is looking for when they audit isn't perfection. It's consistency. A documented, repeatable process that every new hire goes through shows you're taking this seriously. A paper stack in a drawer does not.
A solid I-9 process in a modern payroll system looks like this:
When a manager in a different location needs to complete a verification, they log in, follow the workflow, and document their step. There's no ambiguity. There's no "I thought someone else handled it."
That kind of process is what protects you if you're ever audited.
It's easy to assume I-9 enforcement is something that happens to large corporations or companies in industries with complex immigration patterns. It's not.
Any business that hires people is subject to I-9 compliance. Restaurants, auto repair shops, retail operations, construction firms, and healthcare practices. If you have employees, you have I-9 obligations. And if you're running paper onboarding, relying on manual verification steps, or haven't updated your process since the March 2026 guidance, your exposure is real.
The good news is that cleaning this up isn't complicated. It starts with moving to an electronic process and building a workflow that takes human error out of the equation as much as possible.
If you're not sure where your I-9 process stands, a good first step is to pull a sample of recent forms and check them against the current Substantive violation list. Look specifically for the newly reclassified items, missing dates, missing employer information in Section 2, and any remote hires where documentation of the verification process isn't stored.
If you're using a modern payroll platform, check whether the I-9 compliance dashboard is set up and active. Most major providers have it. It just needs to be configured correctly.
And if you're still running paper onboarding, now is a reasonable time to change that. The process of moving to electronic onboarding is straightforward, and the reduction in compliance risk is significant.
Payroll compliance doesn't have to be complicated. It mostly needs to be consistent.
If you're looking to tighten up your payroll and HR compliance process, we can help you build a system that's clean, documented, and audit-ready.