FreshVerdict · I-9 compliance guide

I-9 compliance tool · not attorneys · not legal advice

Federal contractor E-Verify and I-9 rules in 2026 — including the existing-employee rule nobody expects

Winning a covered federal contract does something no other event in I-9 law does: it sends you back into the files of employees you hired years ago. The FAR E-Verify clause requires enrollment, company-wide verification of new hires, verification of existing employees assigned to the contract, and flow-down to covered subcontracts — all on top of Form I-9s that were never built for a second look.

Most employers meet E-Verify as a choice or a state mandate. Federal contractors meet it as a contract term. The obligation lives in the clause written into the award, it reaches subcontractors through flow-down, and it carries one duty that exists nowhere else in employment-eligibility law: running existing employees, already working for you, through E-Verify because they were assigned to the contract. This page walks what the clause requires, in what order, and where it collides with an I-9 file that was never audited.

The one-sentence version: if your contract carries the E-Verify clause, you generally must enroll within about 30 days, verify new hires company-wide, verify existing employees assigned to the contract (generally within 90 days of enrollment or 30 days of assignment), and flow the clause into covered subcontracts — while every underlying Form I-9 stays subject to per-form penalties of roughly $288 to $2,861.

The six obligations, in the order they hit you

Step 1

Find the clause in your contract — don't assume from the agency

The obligation travels with the contract language, not with who you're selling to. Check the awarded contract (and every modification) for the E-Verify clause. Some awards are excluded by dollar value, duration, place of performance, or because they're only for commercially available off-the-shelf items. Read the clause you were actually given rather than guessing from the agency's name — the exclusions are where employers get this wrong in both directions.

Step 2

Enroll within the deadline the clause sets

If the clause applies and you aren't already enrolled, you generally have a short window after award — commonly described as 30 days — to enroll in E-Verify as a federal contractor. Enrolling in the correct category matters: the contractor enrollment carries obligations that ordinary voluntary enrollment does not. Confirm the exact window against your clause text and current program materials.

Step 3

Start verifying new hires — all of them, company-wide

Once enrolled under the clause, you generally begin creating E-Verify cases for new hires. Note the scope surprise: a federal contractor's new-hire verification is typically company-wide, not limited to the people touching the contract. There's a short ramp-up period after enrollment before the standard three-business-day rule governs every case.

Step 4

Verify existing employees assigned to the contract — the rule that surprises everyone

This is the obligation that has no equivalent anywhere else in I-9 law. Ordinary employers never re-verify employment authorization for existing staff just because a document expired on paper or a contract was won. Federal contractors under the clause must run E-Verify on existing employees assigned to the covered contract — generally within 90 days of enrollment or within 30 days of the employee being assigned, whichever fits your situation. That means going back into old I-9 files that were never built to withstand a second look.

Step 5

Flow the clause down to covered subcontracts

Prime contractors generally must include the E-Verify clause in covered subcontracts. Your subs then carry their own enrollment and verification duties. Flow-down is a paperwork obligation on you — the prime — and a compliance obligation on them, and ICE has historically been willing to inspect down a contracting chain rather than stopping at the top.

Step 6

Keep the I-9s and the case records together and inspection-ready

You still complete and retain a Form I-9 for every employee on the normal schedule. The E-Verify case record sits on top of it. When an inspection comes, the two are read against each other — a clean case history built on a defective I-9 is not a defense, it's a map.

Why the existing-employee rule is the expensive part

Every other I-9 obligation is forward-looking: get the new hire's form right, on time, and reverify when authorization actually expires. The federal contractor rule is the one that looks backward. Verifying existing employees assigned to a covered contract means opening files that were completed by people who have since left, under earlier versions of the form, in whatever state your onboarding process was in at the time.

Nothing about the contract creates those errors — they were already there, already fineable, already accruing per form. The contract is simply the event that makes someone look. That is why contractors who audit before the sweep are in a completely different position from contractors who audit because the sweep found something.

Six traps that catch federal contractors

Assuming the clause doesn't apply because you're a subcontractor

Covered subcontracts carry the clause too. If a prime flowed it down to you, you have your own enrollment and verification obligations — being one layer removed from the agency does not remove them. Read the subcontract, not the prime's summary of it.

The existing-employee sweep runs into I-9s that were never clean

The moment you verify existing employees assigned to a contract, you are pulling I-9s that may be years old — completed by staff who have left, in formats that changed, with missing dates, unsigned Section 2s, and reverifications that lapsed. The contract obligation is what surfaces them; the per-form penalty exposure was already there. Auditing those files first is the whole point.

Running only contract staff through E-Verify for new hires

For new hires, contractor enrollment generally means company-wide verification — not just the people billed to the contract. Selectively running some new hires and not others is both a program violation and the kind of inconsistency that reads as discrimination.

Treating a Tentative Nonconfirmation as a contract problem

A mismatch on an existing employee assigned to a contract is handled exactly like any other TNC: notify, let them contest, and change nothing about their job, pay, or training while it's unresolved. Pulling someone off a contract because of an open TNC is adverse action, and contract pressure is not a defense.

Missing the flow-down and discovering it during an inspection

If covered subcontracts went out without the clause, that's a contracting defect you'd rather find yourself. It also means your subs' workforces were never verified — which is precisely the exposure an inspection of the chain is designed to find.

Believing E-Verify participation immunizes the I-9 file

It doesn't. Federal I-9 civil penalties for paperwork and substantive violations still run roughly $288 to $2,861 per form in 2026 whether or not you're enrolled, and knowing-hire penalties run far higher. Enrollment adds a monitored record on top of the same underlying duty.

The through-line: the E-Verify clause does not replace the Form I-9 — it puts a contract-enforced spotlight on the I-9s you already have. A clean, self-audited file is what makes the enrollment sweep a formality instead of a discovery.

What to do before the enrollment sweep

If your state also mandates E-Verify, the two regimes stack rather than cancel — E-Verify mandate states 2026 has the map, and I-9 civil penalties 2026 has the per-form dollar exposure that applies either way.

Won a covered contract? Audit the old I-9s before E-Verify does.

FreshVerdict scans your Form I-9s, flags every error that carries a 2026 penalty, shows the USCIS-correct fix for each, and tracks reverification dates — so the files you are about to run through a contractor sweep are clean first. Start with a free readiness check.

Check my I-9 audit-readiness →

Federal contractor E-Verify FAQ

Which federal contractors have to use E-Verify?

The duty comes from the E-Verify clause in the contract itself, not from the agency you contracted with. When a solicitation or award includes the FAR E-Verify clause, the contractor must enroll and verify. Certain awards are excluded — for example by dollar threshold, short duration, work performed entirely outside the United States, or contracts only for commercially available off-the-shelf items. Because the exclusions are specific and change with the acquisition rules, check the clause text in your actual contract and every modification rather than relying on a general rule of thumb.

How long do I have to enroll after being awarded a covered contract?

The clause sets a short post-award window, commonly described as 30 days, to enroll if you are not already an E-Verify participant. Enroll in the federal contractor category, because that enrollment carries obligations — notably verification of existing employees assigned to the contract — that ordinary voluntary enrollment does not. Confirm the exact deadline against the clause in your contract and the current official program materials.

Do I really have to E-Verify employees I hired years ago?

For existing employees assigned to a covered federal contract, yes — and this is the single most surprising part of the rule, because nothing else in I-9 law asks you to revisit the work authorization of current staff. The timeframes are generally described as within 90 days of enrollment or within 30 days of assigning the employee to the contract. Practically, it means opening old I-9 files that were never built for a second look, which is why a self-audit before the sweep is worth far more than one after.

Does the new-hire verification apply company-wide or only to contract staff?

For new hires, a federal contractor's obligation is generally company-wide once enrolled under the clause — not limited to employees working on the contract. The existing-employee obligation is the narrower one: it reaches employees assigned to the covered contract. Getting these two scopes backwards is a common and expensive mistake, because running only some new hires is both a program violation and a discrimination risk.

Do I have to put the E-Verify clause in my subcontracts?

Prime contractors generally must flow the clause down into covered subcontracts, and those subcontractors then carry their own enrollment and verification duties. Treat flow-down as part of your contracting checklist, not an afterthought: a missing clause is a contract defect on your side and an unverified workforce on theirs, and an inspection can follow the chain rather than stopping at the prime.

What happens to a federal contractor whose I-9s fail an inspection?

The same civil penalties apply as for any other employer — roughly $288 to $2,861 per form for paperwork and substantive violations under the 2026 figures, assessed per form, with knowing-hire penalties running far higher. Contractors carry an additional layer of risk beyond the fine, because immigration compliance findings can become a contracting and responsibility problem as well. That combination is why contractors generally want their files clean before an enrollment sweep, not after.

We just won our first covered contract. What should we do first?

Before the E-Verify sweep touches anything, audit the I-9s you already have — especially for the employees you expect to assign to the contract. A lawful self-audit finds missing signatures, blank or late Section 2 dates, lapsed reverifications, and unacceptable document entries while you can still correct them the USCIS-approved way and log the correction. Then enroll within the clause deadline, verify new hires company-wide, run the existing-employee sweep on assigned staff, and flow the clause into covered subcontracts.

Related: the E-Verify enrollment guide (the MOU you sign), E-Verify mandate states 2026 (state rules that stack on top), the 2026 I-9 self-audit checklist (fix each error), and the ICE Notice of Inspection checklist (what happens if the government arrives first).

FreshVerdict is an I-9 compliance tool — not attorneys, and this is general information, not legal advice. The FAR E-Verify clause, its exclusions, and the enrollment and verification deadlines are set by the acquisition rules and official E-Verify program materials and do change; the timeframes described here are the ones generally applied, not a substitute for the clause text in your own contract. For anything consequential — whether a clause applies, how to scope an existing-employee sweep, or a flow-down question — consult a government contracts or immigration attorney.