What Is Form I-9? Scams, Verification Risks & Employer Best Practices

Attorney, Blogs, Petitioner
October 27, 2023

What Is Form I-9?

Form I-9, Employment Eligibility Verification, is a required U.S. employment form used by employers to verify the identity and work authorization of employees hired in the United States.

Employers must complete Form I-9 for most new hires and retain records for compliance purposes. Many employers search for Form I-9 online when onboarding new hires or updating compliance records.

In recent times, scammers have been sending fake emails pretending to be from the U.S. Citizenship and Immigration Services (USCIS),asking employers to share sensitive Form I-9 Employment Eligibility Verification information. Because employers rely on Form I-9 for onboarding and compliance, scams and verification mistakes can create serious risks. It’s crucial for businesses to be aware of scams of this kind and take proactive measures to protect themselves and their employees.

How Do I Get Form I-9?

The official Form I-9 is available through the U.S. government. Employers typically provide the form during onboarding, either on paper or through an authorized digital I-9 system.

Why Is My Employer Asking for an I-9 Again?

Employers may request a new or updated Form I-9 due to

Rehire situations
Reverification of temporary work authorization
Internal audits
Missing or incomplete records
Transition to digital I-9 systems

Employees should ask HR for clarification if unsure.

Common Employment Verification and I-9 Scams

Common scams include

Fake USCIS emails requesting I-9 records
Fraudulent E-Verify notices
Phishing messages requesting employee documents
Fake compliance audits
Suspicious text messages requesting IDs or work authorization records

Scam emails often appear convincing, featuring email addresses like news@uscis.gov and including USCIS and Office of the Inspector General labels. These fraudulent emails will contain your company’s address and may even display a download button. Beware, when you click on this button, you will be redirected to a non-governmental web address, something like uscis-online.org. This website address might look legitimate, but it isn’t. The official website of the USCIS is www.uscis.gov.

How to Fix I-9 Mistakes Online

If your organization uses a digital I-9 platform, like Imagility I-9 and Compliance, corrections may be easier through audit trails and guided workflows.

Best practices include

Never backdate corrections
Keep original entries visible
Add date and initials
Maintain correction logs
Use compliant software systems

Efficient I-9 Verification Processes for Companies

Companies can improve I-9 efficiency by

Standardizing onboarding workflows
Using secure digital document collection
Setting reverification reminders
Running internal audits regularly
Centralizing records across locations

Simplify Secure I-9 Compliance

Manual I-9 processes can create delays, errors, and security risks. Platforms like Imagility help organizations streamline verification workflows, centralize records, and stay audit-ready.

What You Should Do When You Receive One Such Email

Do Not Respond to the Email
First and foremost, never reply to such emails. USCIS does not request Form I-9 submissions via email. You will have to treat such requests as suspicious and delete or report such emails.
Avoid Clicking Links
You could be tempted to click on links within these emails, which you shouldn’t. These links could lead you to malicious websites aiming to steal sensitive information so do not click on any link in such emails.
Report Suspicious Emails
If you suspect that you’ve received a scam email requesting I-9 form information, promptly report it to the Federal Trade Commission. Your vigilance could prevent others from falling victim to such scams.
Verify Legitimacy
If you are unsure about the authenticity of an email, forward it to the USCIS webmaster. USCIS professionals will assess the email and, if necessary, escalate the matter to law enforcement agencies. Remember, reporting potential fraud will not adversely affect your application status.
Educate Your Workforce
Educate your employees and make sure they understand the nature of these scams. Emphasize the importance of not sharing sensitive information online. You can equip your team to identify and respond to phishing attempts effectively through regular training sessions.

Conclusion

USCIS doesn’t require employers to submit I-9 forms to the agency. Employers will have to complete and retain I-9 forms for all their employees. They will need to keep the forms for a certain time period and make them available for government I-9 audits. By staying informed and being vigilant, you can shield your organization from these malicious attempts. Remember, USCIS will never request Form I-9 information via email. Be cautious, and report suspicious emails promptly.

Employers are responsible for completing, retaining, and producing Form I-9 records when required. By understanding common scams, correcting errors properly, and improving verification workflows, organizations can reduce risk and stay compliant.

Businesses looking to simplify I-9 management often use secure digital platforms like Imagility to streamline verification, recordkeeping, and audit readiness.

Frequently Asked Questions

Is Form I-9 the same as E-Verify?
No. Form I-9 is required for employment verification. E-Verify is a separate electronic system some employers use.
Can USCIS request I-9 forms by email?
Employers should verify any request carefully. Be cautious of suspicious messages.
What is I-9 verification?
It is the process of verifying identity and work authorization for employees.
Can I complete Form I-9 online?
Many employers use compliant digital I-9 systems.