E-Verify is a federal electronic check that compares a new hire's Form I-9 information against government records. Nationally it's voluntary for most private employers — but that's only the default. Federal contract rules and a patchwork of state laws turn it into a requirement for a large and growing share of employers. Missing that you're covered is a compliance gap in itself.
The one-sentence version: E-Verify is mandatory for federal contractors with the FAR clause and for private employers in a cluster of states (Arizona, Alabama, Mississippi, South Carolina, Georgia, North Carolina, Tennessee, Utah, Florida, among others), with thresholds that vary and keep getting lower — but the Form I-9 is required in all 50 states regardless, and E-Verify is built on top of it.
The four buckets every employer falls into
Mandatory nationwide
Federal contractors & subcontractors
If you hold a federal contract that contains the FAR E-Verify clause, E-Verify is required regardless of what state you operate in. This mandate flows from federal contracting rules, not state law, so it sits on top of everything below. Covered contractors must run new hires — and often existing employees assigned to the contract — through E-Verify.
Broadest exposure
States that mandate E-Verify for most private employers
A cluster of states require most or all private employers to use E-Verify — commonly cited examples include Arizona, Alabama, Mississippi, South Carolina, Georgia, North Carolina, Tennessee, Utah, and Florida. The employee-count threshold that triggers the requirement varies by state and has generally been lowered over time, so a business that was exempt a few years ago may be covered now. Verify your state's current threshold before assuming you're out of scope.
Narrower, but common
States that mandate E-Verify for public employers / state contractors only
Many more states require E-Verify only for public agencies, or as a condition of holding a state or local government contract. If you bid on public work in these states, the mandate reaches you through the contract even if private employers in the same state are not required to enroll.
No requirement (or limits)
States with no mandate — or that restrict it
Some states impose no E-Verify requirement at all, and a few actively limit when a private employer can require it. Being in one of these states does not lower your federal Form I-9 duty by one inch — the I-9 is federal law everywhere. It only means E-Verify itself is optional for you.
State E-Verify laws and their employee-count thresholds change with new legislation. Treat the lists above as the shape of the landscape, not a legal chart — confirm the current rule for your state and headcount before you conclude you're exempt.
Why a mandate raises your I-9 audit exposure
The instinct is to treat E-Verify as a box that, once checked, makes the I-9 less important. It's the opposite. Here's how an E-Verify requirement actually increases what's at stake on the I-9 side:
E-Verify sits on top of a completed I-9 — it doesn't replace it
You cannot run an E-Verify case without first completing a Form I-9. E-Verify pulls key data straight from Section 1 and Section 2. If the underlying I-9 is wrong, late, or missing, the E-Verify case is built on a broken foundation — and every one of those I-9s is still separately fineable in an ICE inspection.
A mandate means a paper trail regulators can pull
In mandate states (and for federal contractors), non-enrollment or spotty use is itself a violation that can carry state penalties — license suspension in the strictest states — layered on top of the federal I-9 exposure. Enrollment status is a matter of record, so it's an easy first thing for an auditor to check.
Tentative Nonconfirmations create I-9 risk if mishandled
When E-Verify returns a Tentative Nonconfirmation (mismatch), there is a strict process for notifying the employee and their right to contest. Terminating, suspending, or withholding pay from a worker over an unresolved mismatch is a frequent — and costly — compliance mistake that also signals a shaky I-9 process underneath.
It raises the stakes on reverification and rehires
High-turnover and seasonal employers who rehire the same workers, or who track EAD/TPS expirations, have to keep the I-9 and the E-Verify case aligned. A mismatch between what E-Verify recorded and what the I-9 shows is exactly the kind of discrepancy that surfaces the day an NOI is served.
The through-line: E-Verify never stands alone. Every case is only as sound as the I-9 it was built from. Whether your state mandates E-Verify or not, a self-audited I-9 file is the foundation that keeps both from becoming an inspection problem.
What to do if you're in a mandate state
If E-Verify is required for you — by contract or by state law — the compliant posture has two layers, and the second is the one most employers neglect:
- Confirm you're actually enrolled and using it correctly for the right population of hires, on the right timeline. Enrollment status is a matter of record.
- Keep the I-9 underneath it clean. E-Verify pulls from the I-9, so a per-form I-9 error is also a crack in your E-Verify records. A lawful self-audit finds and corrects those errors before an inspector does.
- Handle Tentative Nonconfirmations by the book — notify, allow the contest window, and never terminate or dock pay over an unresolved mismatch.
- Align rehires and reverification so the I-9 and the E-Verify case never tell two different stories about the same worker.
The error-by-error correction method is in the 2026 I-9 self-audit checklist, and the per-form dollar exposure is broken down in I-9 civil penalties 2026.
Mandate or not, the I-9 underneath is what gets fined.
FreshVerdict scans your Form I-9s, flags every error that carries a 2026 penalty, and shows the USCIS-correct fix for each — the same clean file that keeps your E-Verify cases defensible. Start with a free readiness check.
Check my I-9 audit-readiness →E-Verify mandate FAQ
Which states require E-Verify in 2026?
E-Verify is voluntary at the federal level for most private employers, but mandatory for federal contractors that hold a contract with the FAR E-Verify clause. On top of that, a group of states require most private employers to enroll — Arizona, Alabama, Mississippi, South Carolina, Georgia, North Carolina, Tennessee, Utah, and Florida are the commonly cited examples — while many other states require it only for public employers or state contractors. Employee-count thresholds vary by state and have been lowered over time, so confirm your state's current rule and threshold rather than relying on an older summary.
Does an E-Verify mandate replace the Form I-9?
No. E-Verify is an electronic check that runs on top of the Form I-9 — it does not replace it. You must still complete and retain an I-9 for every employee, on time and correctly, in all 50 states. E-Verify actually pulls its data from the I-9, so a bad I-9 produces a bad E-Verify case. The federal I-9 obligation is identical whether or not your state mandates E-Verify.
What happens if I'm required to use E-Verify but don't?
In the strictest mandate states, penalties for non-use can include fines and, in the most serious cases, suspension or revocation of a business license — separate from the federal I-9 civil penalties, which run about $288 to $2,861 per form for paperwork and substantive violations. For federal contractors, failing to comply with the E-Verify clause is a contract-performance problem on top of the immigration exposure. Enrollment status is on record, so it is one of the first things an auditor can verify.
I'm in a state with no E-Verify mandate — am I in the clear?
Only on E-Verify itself. The Form I-9 is federal law and applies to every employer in every state, mandate or not. A missing, late, or error-filled I-9 carries the same per-form penalty in a no-mandate state as it does in Arizona. If anything, employers who skip E-Verify have one fewer check catching problems early — which makes a periodic I-9 self-audit more important, not less.
How does E-Verify affect my I-9 audit exposure?
It raises it in two directions. First, because E-Verify is built on the I-9, any weakness in your I-9 process shows up in your E-Verify records too. Second, mishandling an E-Verify Tentative Nonconfirmation — for example, firing or suspending a worker before the contest process runs its course — creates its own liability. The safest posture is a clean, self-audited I-9 file underneath a correctly run E-Verify process.
Where can I confirm my state's exact requirement?
State E-Verify laws change with new legislation and their thresholds shift, so confirm the current rule with your state's authoritative source and, for anything consequential, an employment or immigration attorney. FreshVerdict is a compliance tool, not a law firm — use this page to understand the landscape, then verify the specific rule that applies to you.
Related: the 2026 I-9 self-audit checklist (how to fix each error), I-9 civil penalties 2026 (what a violation costs), and the 72-hour ICE Notice of Inspection checklist.
FreshVerdict is an I-9 compliance tool — not attorneys, and this is general information, not legal advice. State E-Verify laws and their thresholds change; the state groupings here describe the general landscape and are not a substitute for confirming the current rule for your state and situation. For anything consequential — enrollment obligations, a Tentative Nonconfirmation, or a contract clause — consult an employment or immigration attorney.