E-Verify Requirements by StateWho has to use it in 2026, and what it costs to skip it
E-Verify is voluntary under federal law and mandatory under about a dozen state laws, which is why the question never has a clean national answer. The rules that bite are the ones attached to headcount, and two more states changed their position in 2026. If you hire across state lines, the number that matters is not fifty. It is the handful of states where your next hire flips a switch.
Six kinds of state rule, not one
No headcount floor. A two-person shop is covered.
Count carefully. Crossing the line mid-year triggers the mandate.
Employer picks the method, but one of the two is required.
Reaches subcontractors and labor brokers on covered projects.
Private hiring untouched unless you bid on state work.
Voluntary use is legal. Going beyond federal rules is not.
Most articles on this topic give you a list of states and stop. The list is the easy part. What actually trips employers up is that E-Verify sits on top of Form I-9 with its own separate rulebook, its own deadlines, and its own discrimination exposure, and the penalty in several states is your business license rather than a fine you can write a check for.
Some background first. E-Verify is a federal system run by the Department of Homeland Security with the Social Security Administration. You enroll, and after a new hire completes Section 1 of their I-9 you submit the data and get back either an employment authorization or a mismatch. Enrollment is free. The federal government does not require it of most employers, which is exactly why states filled the gap. E-Verify.gov has the enrollment path and the current MOU.
If you are still sorting out the underlying paperwork, start with the new hire paperwork checklist, because an E-Verify case cannot exist without a completed I-9 behind it. And if the person you are about to verify might be a contractor rather than an employee, settle that classification question first. Contractors do not get I-9s, so they do not get E-Verify cases either.
Tier one
States that cover every private employer
Four states apply the mandate with no headcount floor at all. Alabama, Arizona, Mississippi and South Carolina expect a case on every new hire whether you employ three people or three thousand. Arizona has had its version since the Legal Arizona Workers Act took effect in 2008, which makes it the oldest continuously enforced state mandate in the country and the one with the most developed enforcement history.
Indiana joined this group on July 1, 2026 through a different mechanism, and the distinction matters. Senate Enrolled Act 76, the FAIRNESS Act, was signed on March 5, 2026. It does not order employers to enroll. It makes it unlawful to knowingly hire or keep employing someone without work authorization, then builds an explicit safe harbor: run the person through E-Verify, get an authorized result, and you have a rebuttable presumption that you did not knowingly do anything wrong. Civil fines reach $10,000 per violation, and repeat offenders can lose the authority to operate in the state.
My read on Indiana is that the safe harbor makes it a mandate in everything but name. No counsel is going to advise an Indiana employer to skip a free federal check and instead argue about what the company knew. The practical answer for anyone hiring in Indiana is to enroll.
The headcount that turns the mandate on
Scale is logarithmic. Utah looks permissive at 150, but its law was written to expire only if a federal guest worker program ever gets approved, which has not happened.
Tier two
The headcount thresholds, state by state
These are the states where growth creates the obligation, and where I see the most accidental non-compliance. A company sits under the line for three years, hires four people in a quarter, and nobody on the team knows a legal trigger just fired.
Florida, 25 employees. SB 1718 took effect July 1, 2023 and applies to private employers with 25 or more employees. The enforcement design is unusual: if the state finds three separate failures to use E-Verify inside any 24-month period, it can assess $1,000 per day until you fix it and suspend every license the business holds. Florida lawmakers tried to extend the mandate to all private employers with HB 197 in 2026. It cleared the House and died in Senate Rules, so expect it back.
North Carolina, 25 employees. In force since July 1, 2013, with a carve-out worth knowing about: workers employed for fewer than nine months in a calendar year are excluded. That exemption is the reason seasonal operations in the state can look non-compliant on paper when they are not. Fines run $1,000 to $10,000 per violation.
Tennessee, 35 employees. Since January 1, 2023 the trigger has been 35 or more full-time equivalents under the same FEIN. The FEIN language does real work. If you run several brands under one tax ID, they add up, and a group of small locations can cross the line while each site still feels tiny.
Georgia, more than 10 employees. Georgia ties compliance to local business licensing. Private employers over the threshold must use E-Verify, and smaller ones typically have to file a notarized affidavit claiming the exemption when they apply for or renew a license. Counties will refuse the license without it.
Utah, 150 employees. The highest bar in the country, covering private employers with 150 or more employees working in Utah. The statute carries a contingent repeal tied to federal approval of a state guest worker program. That approval has never come, so treat the requirement as live.
Tiers three through six
Choice states, one-industry states, and the states that push back
Louisiana and Montana give employers an either-or. Use E-Verify, or retain specified work authorization documents for your hires. Montana added its version through HB 226, effective July 2025. Louisiana attaches teeth to the choice: $500 to $2,500 per worker plus permit suspension running 30 to 180 days. Most multi-state employers I talk to pick E-Verify here simply because a document retention program is harder to prove years later than a case number sitting in a system of record.
Ohio went narrow instead of broad. The E-Verify Workforce Integrity Act took effect March 19, 2026 and covers nonresidential construction contractors, their subcontractors and labor brokers working on covered projects. Buildings, highways, bridges, utilities and related infrastructure are in scope. Residential work, manufactured homes, industrialized units and structures incidental to agricultural use are out. If you are hiring construction crews in Ohio, the subcontractor reach is the part to plan around, because your compliance now depends on companies you do not manage.
A larger group of states, Texas and Virginia among them, limits the requirement to public employers and companies bidding on state contracts. Private hiring in those states is untouched until you chase government work, at which point the contract language tells you more than the statute does. The National Conference of State Legislatures tracks this tier as bills move.
Then there are the states running the other direction. California's AB 1236 bars employers from using E-Verify beyond what federal law permits, with misuse penalties up to $10,000 per violation, and Illinois sets penalties of $2,000 to $10,000 under its workplace privacy statute. Voluntary enrollment stays legal in both. What is not legal is using the system to screen applicants or to re-check existing staff. An employer that standardizes on aggressive E-Verify use nationwide can create liability in California while solving for Arizona.
- Run a case after the offer is accepted and Section 1 is done
- Submit within three business days of the first day of work for pay
- Verify every new hire at a participating hiring site, consistently
- Verify existing staff if your federal contract carries the FAR clause
- Keep the case number attached to the I-9 record
- Pre-screen applicants before they accept an offer
- Verify existing employees without the FAR contract clause
- Pick and choose which new hires get a case based on how they look or sound
- Ask for specific documents because E-Verify is involved
- Fire, suspend or delay anyone over a tentative nonconfirmation
The rule that ignores state lines
Federal contractors and the FAR clause
If your contract contains the Federal Acquisition Regulation E-Verify clause, you are covered no matter which state you hire in. The rule has applied to qualifying contracts awarded on or after September 8, 2009, and it reaches further than any state mandate, because it covers current employees assigned to the contract and not only new hires. Employees hired on or before November 6, 1986 who stayed with the same employer are exempt.
The trap is symmetrical and people miss this half. Without the FAR clause, you are prohibited from running existing employees through E-Verify. Federal contractors with the clause are the only employers allowed to do it. A well-meaning HR team that decides to backfill cases for the whole staff has not tightened compliance. It has created a violation across every one of those records, and a hiring process audit will surface it long before a regulator does.
The tentative nonconfirmation sequence
DHS or SSA could not match the data. It is a mismatch, not a verdict on work authorization.
Give the employee the Further Action Notice in private. Do not announce it to the team or the manager.
They either contest or do not. That choice is theirs. Pressuring them toward either answer is a violation.
Same pay, same schedule, same duties. No suspension, no delayed start date, no moving them off a shift.
Employment authorized, or a final nonconfirmation. Only a final nonconfirmation supports termination.
The expensive mistake
What to do when a case comes back as a mismatch
A tentative nonconfirmation means the data you submitted did not match what DHS or SSA holds. It does not mean the person cannot work. Name changes after marriage, a hyphen entered differently, an unreported naturalization, a typo in a nine-digit number: these generate TNCs constantly, and plenty of them resolve as authorized.
Here is the part managers get wrong. While a TNC is open, nothing about the person's employment may change. Same pay, same hours, same duties, same start date. You cannot suspend them, cannot push their first day, cannot quietly move them off the schedule while it sorts itself out. Every one of those is a documented violation, and the Justice Department's Immigrant and Employee Rights Section enforces against exactly this pattern.
Notification has to be private, which sounds obvious until you picture a shared warehouse office or a restaurant back room. Tell the employee directly, hand them the Further Action Notice, and let them make the call on contesting it without a nudge in either direction. The same discipline that keeps background check adverse action defensible applies here.
Operating it
How to run this across a dozen states without losing the thread
The honest answer for most distributed employers is to enroll and verify every new hire everywhere. Uniformity is the best defense you have, because selective verification is where discrimination claims come from. Enrollment costs nothing and one consistent process beats a decision tree that a hiring manager in a new market has to get right under time pressure.
That said, uniform does not mean unlimited. Verify new hires only, never applicants, never existing staff without the FAR clause, and stay inside federal boundaries in California and Illinois. Enrollment is per hiring site, so if you open in a mandate state, adding that site is its own task and not something that happens automatically when you post the job.
Three operational habits carry most of the weight. Put the three-business-day clock on the same timeline your team already uses for I-9 Section 2, because both run from the first day of work for pay. Store the E-Verify case number with the I-9 rather than in a separate spreadsheet, which is where these records go to die. And add a headcount alert for the threshold states you operate in, so crossing 25 in Florida shows up as a task instead of a discovery two years later. Teams already tracking workforce plans by state have the data for that alert sitting right there.
If you are hiring people outside the US, none of this applies to them, and international hiring runs on a different set of rules entirely. E-Verify only covers work performed in the United States.
What changes next
Where this is heading
Two directions of travel showed up in 2026, and they point the same way. Indiana went from a public-sector rule to something that covers every employer in the state. Ohio picked one industry and went deep, pulling subcontractors and labor brokers in with the general contractor. Florida tried to drop its threshold to zero and got close. State legislatures have decided this is their lane.
For a company hiring in five or ten states, the planning assumption I would use is that thresholds fall rather than rise, and that the states already on the list expand scope before new states join. Building the process now at a size where it is easy costs you very little. Retrofitting it across 200 open requisitions in three mandate states is a different project.
One caveat on everything above. This is a guide for hiring teams, not legal advice, and state immigration compliance moves faster than most content gets updated. Confirm the current rule with counsel in any state where the answer changes what you do, especially before an acquisition, a new office, or a bid on public work.
Frequently Asked Questions
Which states require E-Verify for all private employers?
Alabama, Arizona, Mississippi and South Carolina require every private employer to run E-Verify on new hires regardless of headcount. Indiana joined that group in a different way on July 1, 2026: its FAIRNESS Act does not order employers to enroll, but it makes E-Verify the safe harbor that protects you if the state ever claims you knowingly hired an unauthorized worker.
What is the employee threshold for E-Verify in each state?
Florida and North Carolina both start at 25 employees. Tennessee starts at 35 full-time equivalents under the same FEIN. Georgia applies to private employers with more than 10 employees. Utah sets the highest bar at 150 employees working in Utah. Below those numbers the state mandate does not apply, though federal contract clauses still might.
Is E-Verify mandatory for federal contractors?
Yes, if your contract contains the Federal Acquisition Regulation E-Verify clause. That clause has applied to qualifying contracts awarded on or after September 8, 2009, and it reaches further than any state law because it covers existing employees who work on the contract and not only new hires. Contractors without the clause are not allowed to E-Verify current staff at all.
What happens if you do not use E-Verify in a state that requires it?
The penalty is usually your business license rather than a fine. Arizona and Alabama can suspend or permanently revoke licenses for repeat violations. Florida can assess $1,000 per day and suspend all licenses once its labor agency finds three failures inside a 24-month window. North Carolina fines run from $1,000 to $10,000 per violation.
Can you run E-Verify on a candidate before making an offer?
No. A case can only be created after the person accepts a job offer and completes Section 1 of Form I-9, and you have three business days from their first day of work for pay to submit it. Pre-screening applicants is one of the fastest ways to draw a discrimination claim from the Justice Department's Immigrant and Employee Rights Section.
Can you fire someone who gets a tentative nonconfirmation?
No. A tentative nonconfirmation is not a finding that the person lacks work authorization, and a large share of them get resolved. You have to notify the employee privately, let them decide whether to contest it, and keep them working and paid at normal terms while the case is open. Terminating at the TNC stage is the single most expensive E-Verify mistake employers make.
Do states that require E-Verify cover independent contractors?
Generally no. E-Verify follows Form I-9, and I-9 obligations attach to employees rather than independent contractors. That makes worker classification a compliance question and not only a tax question, because misclassifying an employee as a contractor can leave you with neither an I-9 nor an E-Verify case for someone a state auditor counts as staff.
Resources & Further Reading
Related Guides
- New Hire Paperwork Checklist
The I-9 that every E-Verify case sits on top of
- Pre-Employment Background Checks
FCRA disclosure, timing, and adverse action
- Employee Onboarding Checklist
Where the three-day clock fits in week one
- ATS for Small Business
Keeping hiring records auditable as you cross thresholds
External Sources
- E-Verify.gov
Enrollment, the MOU, and current case guidance
- E-Verify: Federal Contractors
FAR clause scope and the existing-employee rules
- NCSL: State E-Verify Action
Legislative tracker for pending state bills
- DOJ Immigrant and Employee Rights Section
Discrimination rules around verification practices
- USCIS I-9 Central
Current form edition and acceptable documents
Hiring records that hold up under audit
Prepzo keeps every requisition, candidate, and hire in one system, so the paperwork trail behind a hire is there when a regulator or an acquirer asks for it.
Try Prepzo free