Can I-9 Be Signed Electronically? (w/Examples) + FAQs

Yes, Form I-9 can be signed and stored electronically, as long as the employer follows the strict federal rules in 8 CFR 274a.2(e)–(i). The Department of Homeland Security allows digital signatures, electronic storage, and even remote document inspection for E-Verify employers, but one missing audit trail or one weak acknowledgment step can turn a routine ICE audit into a six-figure penalty case.

Congress built the legal foundation for electronic I-9s in 2000 with the Electronic Signatures in Global and National Commerce Act, commonly called ESIGN. DHS then added the Form I-9–specific rules through the 2006 interim final rule at 71 Fed. Reg. 34510 and the 2010 final rule at 75 Fed. Reg. 42575. Employers who skip these rules face civil fines under INA §274A and, in knowing-hire cases, criminal charges.

A 2025 ICE enforcement report shows that I-9 audit penalties rose more than 400% between fiscal year 2018 and fiscal year 2024, with average settlements climbing past $30,000 per audited employer. Electronic I-9 mistakes drove a large share of those fines because digital systems leave behind a perfect record of every error.

Here is what you will learn in this guide:

• ⚖️ The exact federal rules that make an electronic I-9 signature legally valid.
• 🖊️ How to build a compliant e-signature workflow that survives an HSI audit.
• 🧑‍💻 When the DHS alternative procedure for remote document inspection applies.
• 💸 The 2026 penalty amounts under the Federal Civil Penalties Inflation Adjustment Act.
• 🛡️ The common mistakes that trigger DOJ Immigrant and Employee Rights Section discrimination claims.

The Short Answer: Electronic I-9s Are Legal Under Federal Law

Electronic I-9s are fully legal across every U.S. state and territory. The authority flows from three layers of law that stack on top of each other. Each layer solves a different problem, and an employer must respect all three at once.

ESIGN Act: The Federal Foundation

The ESIGN Act of 2000 says an electronic signature cannot be denied legal effect just because it is electronic. In plain English, a typed name, a mouse-drawn signature, or a click-to-sign checkbox can carry the same weight as blue ink on paper. The consequence of ignoring ESIGN is simple: your digital I-9 becomes worthless in court, and you look like you never completed the form at all.

Picture Jordan, a new hire at a Boston biotech firm. Jordan clicks a checkbox that says “I attest, under penalty of perjury, that I am a U.S. citizen,” then types his name. Under ESIGN, that click plus typed name equals a valid Section 1 signature. A common misconception is that employers need a handwritten image of the signature. They do not. They need intent, attribution, and an audit trail.

UETA and State Law Layer

Forty-nine states and the District of Columbia have adopted some form of the Uniform Electronic Transactions Act. New York did not adopt UETA but passed its own Electronic Signatures and Records Act. The effect is the same: state law backs up ESIGN and closes any loopholes for state-level claims like wrongful termination. The consequence of skipping UETA-style consent is a state court refusing to treat your digital records as genuine business records.

Imagine Lily, an HR director in Albany. She uses a vendor that never asks employees to consent to doing business electronically. Under New York ESRA, a judge could later exclude those I-9 records from evidence. A real-world misconception is that federal ESIGN preempts everything; it does not preempt record-retention standards built into state law.

8 CFR 274a.2: The DHS-Specific Rules

8 CFR 274a.2(h) sets the I-9-specific electronic signature standard. The rule demands a system that (1) reasonably verifies the signer’s identity, (2) attaches the signature to the form, and (3) produces a printed or electronic confirmation. The consequence of missing any one element is a substantive violation, which is the most expensive type of I-9 fine.

A mini-scenario: Carlos signs an I-9 through a vendor that does not time-stamp or attribute the signature to his session. Three years later, HSI subpoenas the form during a Notice of Inspection. The agent treats every I-9 as unsigned, and Carlos’s employer faces substantive penalties on every record. The misconception here is that “the vendor handles compliance.” The employer remains legally responsible, even when the software fails.

How the Electronic I-9 Signature Process Works

The electronic signature workflow mirrors the paper process, but it adds digital guardrails. Each step must match a line on the paper Form I-9 and pass the DHS audit-trail test.

Section 1: Employee Attestation

The employee must complete Section 1 no later than the first day of employment. The e-signature must capture the exact attestation language about citizenship or immigration status. The system must save the IP address, timestamp, and user ID. If any of those pieces are missing, the signature fails the USCIS M-274 Handbook for Employers standard.

Think of Priya, a software engineer joining a San Francisco startup on March 2, 2026. She logs in, reviews her attestation, checks the perjury box, and types her full legal name. The vendor stores a PDF receipt plus a JSON audit log. That entire package is her signature under federal law. A common misconception is that the signature is only the typed name; it is actually the whole verified event.

Section 2: Employer Review and Signature

Within three business days of the employee’s start date, the employer or an authorized representative must examine the employee’s documents from Lists A, B, and C and sign Section 2. The e-signature must bind to the exact List A or List B+C choice. The consequence of a broken linkage is that ICE treats Section 2 as unsigned, which is a substantive violation.

Marcus, a hiring manager in Dallas, views Priya’s passport on a live video call and uploads the image. He clicks “I attest, under penalty of perjury, that the documents appear genuine and relate to this employee.” The system locks the document images to his signature event. The misconception here is that a photocopy is enough; the attestation must be tied to the viewing event itself.

Section 3: Reverification and Rehires

Section 3, now called Supplement B on the August 2023 edition, handles reverification, name changes, and rehires within three years. Electronic reverification is allowed, but the signer must be the employer or an authorized representative, never the employee alone. Missing a reverification deadline is a technical violation that can ripen into a substantive one if not cured.

The 2023 Alternative Procedure for Remote Verification

On July 25, 2023, DHS published a final rule at 88 Fed. Reg. 47990 creating an alternative procedure for remote document examination. This rule replaced the expired COVID-19 flexibilities. It is the first permanent remote I-9 option in U.S. history.

Who Qualifies

Only employers enrolled in E-Verify in good standing may use the alternative procedure. The employer must be current on E-Verify tutorials and free of compliance letters. The consequence of using remote verification without E-Verify enrollment is an automatic substantive violation on every affected I-9.

The Five Required Steps

The DHS alternative procedure requires these specific steps. Each step creates its own audit trail and must be documented inside the electronic I-9 system.

• The employee transmits copies of the front and back of List A or List B and C documents to the employer.
• The employer examines the copies to ensure they reasonably appear genuine.
• The employer conducts a live video interaction with the employee within three business days of the start date.
• The employer creates an E-Verify case for the new hire.
• The employer checks the box in Section 2 indicating the alternative procedure was used.

Imagine Aisha, a remote marketing hire in Nairobi working for a Miami agency. Her manager, Rosa, follows all five steps on Zoom, creates the E-Verify case, and checks the alternative-procedure box. The process is legal, fast, and fully remote. A misconception is that employers can use the alternative procedure for some employees and not others; DHS allows that, but only if the policy is non-discriminatory.

Electronic Storage Requirements Under 8 CFR 274a.2(e)

Electronic storage is regulated as tightly as electronic signatures. 8 CFR 274a.2(e) requires an electronic system that prevents unauthorized changes, creates an index, and produces legible copies. The consequence of failing any element is that ICE can refuse to count the electronic I-9 as a valid record.

Audit Trail Requirements

The system must generate a secure, permanent audit trail each time a user creates, completes, updates, modifies, alters, or corrects an electronic I-9. The trail must include the user ID, date, time, and action taken. If the audit trail is missing or can be edited, the I-9 fails the integrity test.

Reasonable Controls

Employers must maintain reasonable controls to ensure integrity, accuracy, and reliability. Controls include access restrictions, background checks for sensitive roles, and regular inspections. The misconception is that “reasonable” is vague and forgiving; ICE auditors treat it as a hard standard and compare systems to industry norms.

Retention Periods

Retain each I-9 for three years after the date of hire or one year after termination, whichever is later. The math can be tricky, so most compliant systems calculate the retention date automatically. Deleting an I-9 early is a paperwork violation that can cost thousands per record.

2026 I-9 Penalty Schedule

The Federal Civil Penalties Inflation Adjustment Act requires DHS and DOJ to raise fines every January. The numbers below reflect the 2026 adjusted amounts published by ICE and DOJ-IER.

The consequence of ignoring these amounts is severe. A 200-employee audit with a 50% error rate at the midpoint paperwork fine can exceed $150,000 before any knowing-hire findings.

Three Common Scenarios and Their Outcomes

Real audits rarely look like textbooks. These three scenarios show how electronic I-9 choices play out in the field.

Scenario 1: Fully Remote Startup Using E-Verify

Scenario 2: Staffing Agency With Third-Party Vendor

Scenario 3: Brick-and-Mortar Retailer Mixing Paper and Digital

Named Examples From Real Compliance Patterns

Stories stick better than statutes. These three examples track how electronic I-9 choices change the outcome for named workers and employers.

Example 1: Priya at a San Francisco Startup

Priya completes Section 1 on her vendor portal on day one. Her employer, a fintech called NorthArc Labs, uses a vendor with full audit trails and E-Verify integration. Three years later, HSI serves a Notice of Inspection. The company produces 412 clean I-9s in 48 hours and walks away with zero fines.

Example 2: Marcus at a Dallas Retailer

Marcus, an HR manager, uses a home-built spreadsheet to track I-9s and emails PDFs to new hires. There is no audit trail, no tamper-evident storage, and no indexing. During an audit, ICE treats 78% of the I-9s as unsigned and issues a $214,000 fine under the 2026 schedule.

Example 3: Aisha at a Miami Agency

Aisha, hired remotely from Kenya, is verified under the DHS alternative procedure. Her employer, BrightPath Media, is in E-Verify good standing and checks the alternative-procedure box. When DOJ-IER investigates a separate claim, they find BrightPath applied the remote procedure to all new hires regardless of citizenship, which protects the company from a documentary-practices claim.

Mistakes to Avoid With Electronic I-9s

Electronic systems speed up compliance, but they also make mistakes easier to audit. Each mistake below triggers a specific, documented consequence under federal law.

• Using e-signatures without capturing IP address or timestamp, which breaks the 8 CFR 274a.2(h) attribution test.
• Letting employees sign Section 2, which is reserved for employers and creates an automatic substantive violation.
• Skipping E-Verify enrollment while using the remote alternative procedure, which voids every remote verification.
• Storing I-9 data inside a general HRIS with no audit trail, which fails the integrity standard.
• Applying remote verification only to foreign-born workers, which triggers DOJ-IER discrimination penalties.
• Missing the three-business-day Section 2 deadline because the vendor lacks automated reminders.
• Deleting I-9s before the retention clock ends, which creates paperwork violations on every missing record.
• Failing to require employee consent to do business electronically, which breaks UETA in most states.
• Relying on vendor marketing claims without testing the audit trail, which leaves the employer exposed at inspection.
• Treating Supplement B (reverification) as optional when a document expires, which is always a substantive violation.

Key Entities That Shape Electronic I-9 Compliance

Several agencies, laws, and roles interact in every electronic I-9 decision. Understanding who does what helps employers spot risk early.

U.S. Citizenship and Immigration Services (USCIS)

USCIS designs and publishes Form I-9 and the M-274 Handbook. USCIS also runs E-Verify through its Verification Division. USCIS does not audit employers, but its guidance binds employers because ICE auditors apply it.

Immigration and Customs Enforcement (ICE)

ICE and its investigative arm, HSI, conduct worksite audits and issue Notices of Inspection. ICE decides what counts as a substantive or technical violation. The consequence of an ICE finding is a civil fine, and in bad cases, criminal prosecution under INA §274.

Department of Justice, Immigrant and Employee Rights Section

DOJ-IER enforces the anti-discrimination rules in 8 U.S.C. §1324b. Employers who demand extra documents from non-citizens or apply remote verification unevenly face DOJ-IER fines. The misconception is that ICE and DOJ-IER are the same agency; they are separate and can penalize the same employer for the same conduct.

The Employer and Authorized Representatives

The employer is always legally responsible for I-9 accuracy, even when using an authorized representative. An authorized representative can be anyone the employer chooses, such as a notary, a manager at another company, or a bonded agent. The consequence of a sloppy representative is borne fully by the employer.

Do’s and Don’ts for Electronic I-9s

Do’s

• Do enroll in E-Verify before using the DHS alternative procedure, because enrollment is a strict eligibility gate.
• Do require a separate electronic-consent checkbox under UETA, because consent is a state-law prerequisite.
• Do test your vendor’s audit trail before go-live, because vendor failures become employer liability.
• Do calendar the three-business-day Section 2 deadline, because late signatures create paperwork fines.
• Do store Supplement B entries in the same record as the original I-9, because ICE reviews them together.

Don’ts

• Don’t let employees sign Section 2, because only the employer or authorized representative may attest.
• Don’t apply remote verification selectively by national origin, because it invites DOJ-IER discrimination claims.
• Don’t delete I-9s before the later of three years from hire or one year from termination, because deletion is a strict-liability violation.
• Don’t accept expired documents, even if the system allows upload, because expired documents never satisfy List A, B, or C.
• Don’t rely on email confirmations as audit trails, because email chains are not tamper-evident under DHS standards.

Pros and Cons of Electronic I-9 Systems

Pros

• Faster onboarding because digital workflows collapse the Section 1 and Section 2 steps into minutes.
• Built-in error checking because the system blocks missing fields before submission.
• Automated retention tracking because the software calculates the later of the two deadlines.
• Audit-ready reporting because a compliant vendor can produce every I-9 in PDF within hours.
• Safer remote hiring because the DHS alternative procedure pairs naturally with digital platforms.

Cons

• Higher upfront cost because compliant vendors charge per employee per month.
• Vendor dependence because a bad software update can corrupt audit trails overnight.
• Privacy exposure because centralized I-9 data becomes a target under state privacy laws like the CCPA.
• Training burden because HR teams must learn vendor workflows and federal rules.
• Migration risk because moving providers can break audit trails if data is not exported correctly.

Key Court Rulings and Agency Decisions

Several rulings shape how judges and auditors read the electronic I-9 rules. Employers should know the high points.

United States v. Employer Solutions Staffing Group

In U.S. v. Employer Solutions Staffing Group III, the Office of the Chief Administrative Hearing Officer upheld substantial fines for missing Section 2 signatures. The case confirmed that a missing employer signature is always substantive, not technical. Electronic systems that allow an unsigned Section 2 to close out inherit the same risk.

DOJ-IER Settlements Involving Remote Verification

Between 2021 and 2025, DOJ-IER entered dozens of settlements with employers that demanded extra documents from non-citizens during remote verification. Settlements routinely included back pay, civil penalties, and training requirements. The lesson is that electronic systems must apply the same document request rules to every employee.

Ketchikan Drywall Services v. ICE

In Ketchikan Drywall Services, Inc. v. ICE, the Ninth Circuit affirmed that employers cannot blame software or consultants for I-9 errors. The ruling means an electronic vendor’s defects do not shield the employer from penalties. This is the single most important rule for HR leaders choosing a vendor.

Frequently Asked Questions

Can I-9 forms be signed with a digital signature like DocuSign?

Yes. DocuSign, Adobe Sign, and similar tools meet ESIGN and DHS standards if they capture identity, attribution, and an audit trail, and if employer sign-off ties to the exact document choice.

Is a typed name enough to satisfy an electronic I-9 signature?

Yes. A typed name is valid under 8 CFR 274a.2(h) when paired with intent, an audit trail, and a confirmation receipt showing the signer completed the attestation.

Can employees complete Section 1 before their first day?

Yes. Employees may complete Section 1 after accepting a job offer but must sign no later than the first day of employment under USCIS M-274 guidance.

Must employers keep the paper original if they scan an I-9?

No. Employers may destroy the paper original after creating a legible electronic copy that meets the integrity and indexing rules in 8 CFR 274a.2(e).

Does the DHS alternative procedure apply to all employers?

No. Only employers enrolled in E-Verify in good standing may use the alternative procedure, and they must apply it consistently to avoid discrimination claims.

Can a notary sign Section 2 as an authorized representative?

Yes. A notary may act as an authorized representative, but the employer remains fully liable for any errors the notary makes on the form.

Is an electronic I-9 valid if the audit trail is missing?

No. A missing or editable audit trail fails the integrity standard in 8 CFR 274a.2(e), and ICE can treat every affected I-9 as substantively defective.

Must employers provide employees with a paper copy of the electronic I-9?

No. A paper copy is not required, but the employer must give the employee access to a confirmation or printable copy of the signed form under DHS rules.

Can Supplement B (reverification) be completed electronically?

Yes. Supplement B may be signed and stored electronically if the system meets the same integrity, audit trail, and indexing standards as the original I-9.

Does signing an I-9 electronically waive the perjury warning?

No. The perjury warning applies to electronic signatures with the same force as handwritten ones under ESIGN and federal immigration law.

Can remote employees hired before July 2023 use the alternative procedure retroactively?

Yes. E-Verify employers who used COVID-19 remote flexibilities could adopt the alternative procedure by August 30, 2023, per the DHS final rule.

Are electronic I-9s acceptable during an ICE Notice of Inspection?

Yes. ICE accepts electronic I-9s at inspection if the employer produces them in a legible, indexed format with a full audit trail within the three-business-day response window.