Restaurant ICE Inspections Are Up 10x: The I-9 Audit Checklist to Run Now

Federal immigration enforcement has intensified, and restaurants are firmly in the worksite-enforcement spotlight.

For operators, that makes Form I-9 compliance more than an onboarding formality. ICE can inspect an employer’s I-9 records, investigate suspected unauthorized employment, and pursue civil or criminal penalties when violations are found.

The federal government has also been testing new ways to connect information across agencies. One controversial effort involved an agreement between the IRS and Immigration and Customs Enforcement (ICE) that allowed ICE to request certain taxpayer address information for non-tax criminal investigations.

For restaurant operators, the practical takeaway is unchanged: inconsistent I-9s, missed reverifications, and weak employment-verification processes can still create significant exposure.

What ICE and auditors look for

• A complete I-9 for every active employee, with Section 1 signed by the employee on or before the first day of work and Section 2 completed by the employer within three business days.
• Correct, unexpired documents in Section 2, limited to acceptable combinations from the Lists of Acceptable Documents, with no expired documents and no obvious mismatch between the document and the employee.
• Timely reverification, with no gap where someone kept working after their work authorization expired.
• Retention without early destruction, keeping I-9s for the required period rather than purging them ahead of schedule.
• The same verification standard at every location, never tightened or loosened based on an employee's nationality, accent, or perceived immigration status. Treating employees differently at the document-check stage creates its own discrimination exposure, separate from the paperwork violation.
• Active E-Verify use wherever federal, state or contract requirements apply. Several states impose E-Verify requirements on private employers independently of federal-contractor rules, and employee-count thresholds and exceptions vary by state. Multi-state restaurant groups should check each location rather than assuming one company-wide rule applies.

Auditors also look past the individual file: whether a documented I-9 policy exists, whether managers are trained on it, and whether the restaurant has a track record of catching and correcting its own errors. A written procedure and a self-correction history put an operator in a different risk category than one with no consistent process. The checklist below is what that documented procedure looks like in practice.

The real financial and operational consequences

I-9 and immigration-related civil penalties are adjusted for inflation on a regular basis, and have climbed into a range where paperwork errors alone can become a five- or six-figure problem for a single restaurant group.

• Paperwork violations: $288 to $2,861 per form, depending on employer size, seriousness, history, and good-faith efforts to comply.
• Knowingly employing unauthorized workers: $716–$5,724 per worker (1st offense), $5,724–$14,308 (2nd), up to roughly $28,619 (3rd or subsequent).
• Criminal penalties apply for a pattern of knowing violations or identity document fraud.

A 40-employee restaurant with systemic paperwork errors could reach base fines in the tens of thousands before any multiplier for aggravating factors. A multi-location group with widespread non-compliance can cross into six- or seven-figure exposure. Beyond the fines: sudden staffing gaps if workers are detained, reputational cost from local news coverage, and higher turnover as an aggressive enforcement climate raises anxiety among immigrant workers.

These fine structures are officially codified under 8 CFR § 274a.10. Due to a pause in the federal inflation adjustments, these amounts remain the active, in-force rates.

1. Confirm every current employee has a complete I-9

Section 1 needs to be completed and signed by the employee no later than their first day of work.

Section 2 needs to be completed by the employer within three business days of the employee's start date.

Missing signatures, missing dates, or a Section 2 completed weeks late are among the most common findings in an audit, and they're also the easiest to catch before someone else finds them.

2. Track reverification dates before they lapse

Some List A and List C documents, including certain work authorization documents, carry expiration dates that require reverification. An employer that misses a reverification deadline is out of compliance even if the original I-9 was filed correctly. Build a calendar or automated reminder for every upcoming expiration rather than discovering it during an audit.

3. Never ask for more documents than the law requires

An employee gets to choose which acceptable document or combination of documents to present from the I-9 list. Employers cannot demand a specific document, ask for more documents than required, or apply extra scrutiny to certain employees based on citizenship status or national origin. This is a distinct violation from an incomplete I-9, known as document abuse, and it's the specific pattern the Department of Justice has been settling with restaurants over. Fixing under-verification while introducing over-verification trades one violation for another.

4. Confirm E-Verify cases are created and resolved on time

If a restaurant is enrolled in E-Verify, whether voluntarily or because federal contractor status or state law requires it, a case needs to be created for every new hire within three business days of the start date, the same window that governs I-9 Section 2. A completed I-9 with no matching E-Verify case is its own audit finding, separate from anything wrong with the I-9 itself.

If a case comes back as a tentative non-confirmation, notify the employee in writing, let them contest it if they choose, and take no adverse action, including firing or cutting hours, while the case is still open. Acting on it before the contest period ends creates a new violation.

Multi-location operators should also confirm that every location is actually covered under the company's E-Verify enrollment. Coverage doesn't automatically extend to a new location added after the original signup.

Did you know: A name/SSN mismatch does not by itself mean an employee is unauthorized to work. Employers should first check their own records and ask the employee to verify the information against their Social Security record.

5. Correct errors the right way

If a mistake turns up during a self-audit, draw a single line through the incorrect information, enter the correct information, and initial and date the change. Never use correction fluid, and never backdate a form to make it look like it was completed on time. An improperly corrected I-9 can draw more scrutiny than the original error.

6. Store I-9s separately and retain them for the required period

Store I-9 forms in a secure system that's easy to search during an audit. Retention runs for three years after the date of hire or one year after termination, whichever is later. An organized, centralized set of records turns an inspection into a quick document pull instead of a days-long scramble across locations.

Make this a Payroll review, not only an HR one

I-9 compliance lives in HR, but the records surrounding an employee often span payroll, onboarding and workforce systems.

Use the self-audit to check that employee names, Social Security numbers, hire dates and other identifying information are consistent across your records. Mismatches do not automatically mean a worker is unauthorized, but unresolved discrepancies can create wage-reporting problems and warrant follow-up.

Keeping HR and payroll records aligned also makes it much easier to respond quickly if an inspection or records request arrives.

Workstream's HRIS and Compliance tools build these checks into onboarding instead of leaving them for an annual audit. Automated I-9 and E-Verify processing catches missing signatures and dates as they happen, and digital document storage keeps every record centralized, searchable, and ready if an inspection notice arrives.

Run your I-9 self-audit before ICE runs it for you. See how Workstream keeps onboarding records audit-ready.

Request a demo of Workstream →