How to Identify and Respond to Form I-9 Scams


Share this on:

In recent times, scammers have been sending fake emails pretending to be from U.S. Citizenship and Immigration Services (USCIS), asking for important Form I-9, Employment Eligibility Verification information from employers. It’s crucial for businesses to be aware of scams of this kind and take proactive measures to protect themselves and their employees.

Recognize the Scam

Scam emails often appear convincing, featuring email addresses like and including USCIS and Office of the Inspector General labels. These fraudulent emails will contain your company’s address and may even display a download button. Beware, when you click on this button, you will be redirected to a non-governmental web address, something like This website address might look legitimate, but it isn’t. The official website of the USCIS is

What You Should Do When You Receive One Such Email

Do Not Respond to the Email

First and foremost, never reply to such emails. USCIS does not request Form I-9 submissions via email. You will have to treat such requests as suspicious and delete or report such emails.

Avoid Clicking Links

You could be tempted to click on links within these emails, which you shouldn’t. These links could lead you to malicious websites aiming to steal sensitive information so do not click on any link in such emails.

Report Suspicious Emails

If you suspect that you’ve received a scam email requesting I-9 form information, promptly report it to the Federal Trade Commission. Your vigilance could prevent others from falling victim to such scams.

Verify Legitimacy

If you are unsure about the authenticity of an email, forward it to the USCIS webmaster. USCIS professionals will assess the email and, if necessary, escalate the matter to law enforcement agencies. Remember, reporting potential fraud will not adversely affect your application status.

Educate Your Workforce

Educate your employees and make sure they understand the nature of these scams. Emphasize the importance of not sharing sensitive information online. You can equip your team to identify and respond to phishing attempts effectively through regular training sessions.


USCIS doesn’t require employers to submit I-9 forms to the agency. Employers will have to complete and retain I-9 forms for all their employees. They will need to keep the forms for a certain time period and make them available for government I-9 audits. By staying informed and being vigilant, you can shield your organization from these malicious attempts. Remember, USCIS will never request Form I-9 information via email. Be cautious, and report suspicious emails promptly.

Helpful I-9 Resources

Form I-9 Playbook

Navigating the I-9 Form 2023: What You Need to Know

DHS Ends Form I-9 Requirement Flexibility

Internal I-9 Form Corrections and Audit Instructions

Streamlining I-9 Compliance with Imagility – Case Study

I-9 Reverification Simplified: What Every Employer Should Know

Alternative Procedure for Remote Form I-9 Document Verification

I-9 Compliance Verification: E-Verify Requirements & Acceptable I-9 Documentation

Imagility I-9 – Datasheet


Subscribe for latest blog updates

By submitting this you will be receiving our latest updates on the blogs.

Get Started With Imagility

Save upto 6 hours a day!