ICE Toughens Form I-9 Penalties, Making Internal Audits Worth the Time

Few HR tasks feel more routine than completing a Form I-9. A new hire fills out Section 1, someone in HR reviews documents and completes Section 2, and the form goes into a file. In 2026, Immigration and Customs Enforcement changed how it treats the mistakes that inevitably creep into that process, and the change raises the stakes for every employer.

What changed in March

On March 16, 2026, ICE updated its fact sheet on Form I-9 inspections under the Immigration and Nationality Act. The update came without a press release or a Federal Register notice. According to the law firm Alston and Bird, it reclassified 17 common Form I-9 errors from correctable technical failures to substantive violations. It also replaced guidance from the 1997 Virtue Memorandum, which employers had relied on for nearly three decades to understand which errors could be fixed.

The difference between those categories matters. In the past, an inspection that turned up technical errors usually gave the employer a window to correct them before fines applied. Substantive violations carry no such window. Foley and Lardner notes that ICE will not offer employers an opportunity to correct substantive deficiencies before issuing fines. For 2026, those fines range from $288 to $2,861 per form.

Employment attorneys have flagged missing dates, missing signatures, incomplete document details and attestation errors as areas that now fall on the substantive side. A small employer with a few dozen forms might not notice the difference. A manufacturer or senior living operator with hundreds of active employees and high turnover could face a very different bill.

The August revision raised the stakes again

ICE revised the fact sheet again on August 31, 2026. Alston and Bird reports that the revision changes inspection procedures, adds a notice regarding employees' work authorization and modifies penalty calculations. It also places new emphasis on electronic I-9 systems. Employers that use electronic platforms should confirm with their vendors that audit trails satisfy federal requirements at 8 C.F.R. 274a.2, since gaps in those trails can create exposure during an investigation.

Remote document review is another trouble spot. ICE's guidance makes clear that the alternative remote verification procedure is available only to employers enrolled in E-Verify and in good standing at the time it is used. An employer that examined documents by video without that enrollment may have a problem it does not know about.

E-Verify now requires ongoing attention

E-Verify used to be a one-time check at hiring. That is no longer the case. Foley and Lardner explains that DHS now issues a Status Change Report roughly every two weeks. E-Verify employers must review those reports, and if a current employee appears on one, the employer must meet with that employee and ask to reverify the Form I-9. Alston and Bird warns that failing to act on these reports risks exposure for knowing violations.

Who should worry most

Any employer with a large or fast-moving workforce has more forms and more chances for error. That includes manufacturers in a hiring push, which we covered in our manufacturing workforce report, and contractors who rely on seasonal crews, as noted in our construction labor analysis. Senior living employers face particular exposure because roughly a quarter of assisted living employees are immigrants, a point raised in our senior living coverage.

Law firms also expect inspections to become more frequent. ICE audits have historically been rare, but several firms tracking the changes note that increased agency staffing and funding point toward more worksite activity.

A practical audit plan

An internal I-9 audit costs far less than a single substantive violation multiplied across a workforce. Most employment attorneys recommend a similar sequence. Start by pulling every active Form I-9 and every form for employees terminated within the retention period. Check each form for completeness against the fields now classified as substantive. Correct what can be corrected using proper procedures, never by backdating, and document every correction.

Next, confirm your electronic system's audit trail meets the regulatory standard, review how remote verification was handled, and assign a named owner for the E-Verify Status Change Report. Finally, train every person who completes Section 2. A short annual refresher prevents most errors from happening in the first place.

The same review is a good moment to check other compliance changes that took effect this year, including new state paid leave programs and state rules on AI in hiring.