Employers: ID Document Verification That Meets I-9 Rules

Most identity checks come down to one thing: a valid, unexpired government-issued photo ID, such as a driver’s license, state ID, or passport. Depending on the reason you’re verifying, you may also need a Social Security number on hand. Whether you complete the process remotely with a live photo and selfie, or in person with original documents, depends on the service and what triggers your verification.

TL;DR:

• Most identity verification relies on a valid, unexpired government-issued photo ID, but certain employment checks require a specific list of documents from USCIS, including options for combined or individual proof.
• Remote verification involves live photo capture of your ID, automated checks, and biometric selfie matching, with live capture preferred over static images for security reasons.
• In-person or hybrid verification at a Post Office is available if remote capture fails or specific documents are required, typically completed within 24 hours with an expiring barcode.
• Employers must complete Form I-9 verification within three business days of hire, strictly examining original documents and avoiding expired or non-compliant IDs.
• For ongoing workflow efficiency, integrating identity checks with electronic signatures, as BeeSign offers, reduces bottlenecks and maintains a secure, auditable process.

Table of Contents

• Accepted IDs: primary vs. secondary and USCIS Form I-9 lists
• How remote identity verification works: live capture, automated checks, and facial matching
• In-person and hybrid verification options through Login.gov and USPS
• Employer verification specifics for Form I-9 timing and compliance
• Unacceptable documents and photo tips that avoid rejection
• Why a compliant identity verification workflow matters and how BeeSign fits in
• How your personal data stays protected during verification
• What to do when your identity information doesn’t match
• Verifying non-citizen documents and work authorization cards
• Device and connectivity requirements for remote verification
• Setting up your space for a smooth remote check
• When remote verification makes sense versus when to go in person
• Get identity verification built into your document workflow with BeeSign
• Sources
• FAQ

Accepted IDs: primary vs. secondary and USCIS Form I-9 lists

When you’re verifying identity for employment purposes, the rules come from Form I-9, and they’re specific about which documents count and how they’re grouped. The USCIS handbook organizes acceptable documents into three lists, and you only need to satisfy one combination, not all three.

List A documents prove both identity and employment authorization at once, so presenting one is enough on its own. Examples include a U.S. passport or certain Employment Authorization Documents.

List B documents establish identity only. A state driver’s license, a state-issued ID card, or in some cases a school or military ID falls here.

List C documents establish employment authorization only. A Social Security card that carries no work-restriction language, an original birth certificate, or a DHS-issued employment authorization document all qualify.

You satisfy the requirement either with one List A document, or with one document from List B paired with one from List C. Here’s what employers must accept:

• Any single, unexpired List A document presented in original form.
• One unexpired List B document plus one unexpired List C document, presented together.
• Original documents only. Photocopies and printouts don’t count.
• Expired documents in any category, with rare exceptions tied to specific automatic extensions.

Employers cannot tell you which document to bring from these lists. The USCIS guidance on Section 2 makes clear that as long as your documents reasonably appear genuine and belong to you, the choice is yours.

How remote identity verification works: live capture, automated checks, and facial matching

Remote verification follows a predictable sequence, and knowing the order helps you move through it without surprises.

1. Document photo capture. You use your device’s camera to photograph the front and back of your ID.
2. Automated document authentication. The system checks security features, fonts, and layout against known templates.
3. Identity resolution. Your name, date of birth, and often your Social Security number get cross-checked against records.
4. Phone or address confirmation. Many services text a code to your phone or verify your mailing address.
5. Selfie biometric match. For higher assurance levels, you take a live selfie that gets compared against your ID photo.

Login.gov’s identity verification requirements explain why scanned uploads or saved photos are typically rejected: live capture carries metadata and anti-spoofing signals that a static image file doesn’t, which makes it much harder to submit a doctored or borrowed ID.

Assurance levels matter here too. A basic check might stop at document authentication, while an enhanced level, sometimes called IAL2, adds the selfie match and stricter data checks. If your capture fails repeatedly, most services let you retry with a different device or fall back to an in-person option.

Pro Tip: Use your phone’s rear camera instead of a webcam. It’s almost always sharper and handles glare better.

In-person and hybrid verification options through Login.gov and USPS

Not every verification happens on a screen. When remote capture fails or a service requires physical inspection, a hybrid path fills the gap. Login works like this:

• Complete the online steps first, including entering your personal details.
• Receive a barcode tied to your session.
• Bring that barcode and your driver’s license or state ID to a participating Post Office.
• Get your results by email, typically within about 24 hours.

The barcode expires after a short validity period, so schedule your visit promptly. One detail worth flagging: some ID types accepted online, such as a passport, aren’t accepted at every in-person location, so check before you go. Agencies that require original documents in person will usually tell you exactly what to bring, and calling ahead avoids a wasted trip.

Employer verification specifics for Form I-9 timing and compliance

Employers face a strict clock. Under USCIS Section 2 guidance, you must complete Section 2 by examining original, unexpired documents within three business days of the employee’s start date, and the window is shorter for very short-term hires.

The rule to complete Section 2 within a few business days is the single most important compliance deadline on the form. Missing it is one of the most common I-9 violations employers make.

A few practical rules to keep in mind:

• Examine original documents in person unless you participate in E-Verify and qualify for an authorized alternative remote examination procedure.
• Record the document title, issuing authority, number, and expiration date directly in Section 2.
• Sign and date Section 2 yourself as the employer representative, attesting the documents appear genuine.
• Accept a receipt in place of a List A, B, or C document only when the employee has lost, damaged, or applied for a replacement, and follow up within the receipt’s validity window.

The most frequent mistakes are asking for a specific document instead of letting the employee choose, accepting anything expired, and simply missing the three-day deadline.

Unacceptable documents and photo tips that avoid rejection

Some documents get rejected almost automatically, whether a person or an algorithm is reviewing them. Photocopies, temporary paper printouts, expired IDs of any kind, and Social Security cards bearing work-restriction language all tend to fail review because they either can’t be authenticated or don’t meet the legal standard.

For remote capture, a few habits make the difference between a clean pass and a frustrating retry:

1. Hold the device steady and let autofocus settle before you shoot.
2. Use even, natural light and avoid glare across the ID’s surface.
3. Frame the entire card or passport page, corners included, with nothing cropped.
4. Remove face coverings and glasses for the selfie step.
5. Lay the document flat rather than propping it against something reflective.

If a capture keeps failing, try a different device, switch to in-person verification, or contact the requesting agency directly. Some organizations have a documented exception path for edge cases.

Why a compliant identity verification workflow matters and how BeeSign fits in

Getting identity verification right protects both sides of a transaction: the person proving who they are and the organization relying on that proof. For businesses handling contracts, HR paperwork, or client onboarding at any real volume, doing this manually creates bottlenecks and risk.

BeeSign builds identity verification directly into its e-signature workflow, so a signer’s government ID verification workflow happens in the same step as the document signing itself, backed by bank-level document security.

That combination fits a range of situations:

• HR teams onboarding new hires who need identity confirmation alongside offer letters and tax forms.
• Financial services teams handling KYC documentation that requires both identity proof and an auditable signature trail.
• Any workflow where a government ID needs to be captured, verified, and attached to a signed record in one pass.

Organizations that need the platform under their own domain and branding can run it through BeeSign’s white-label and bring-your-own-cloud options, keeping data inside their own infrastructure.

How your personal data stays protected during verification

Identity verification only works if people trust the process with sensitive data, so the security behind the scenes matters as much as the steps you see. During a typical remote check, your ID images and biometric selfie data are transmitted over encrypted connections and used only to confirm your identity, not for unrelated purposes.

Reputable verification providers limit who inside their organization can view raw document images, often restricting access to automated systems and a small review team for flagged cases. Data retention policies vary by provider and by the regulation governing the transaction, whether that’s a financial services requirement, a healthcare rule like HIPAA, or a general privacy law.

When you’re asked to verify identity as part of signing a contract or completing HR paperwork, it’s worth checking whether the platform encrypts documents at rest, not just in transit, and whether it gives you visibility into who accessed your information and when. A document signing platform with integrated identity verification that maintains a full audit trail gives you that visibility without extra steps.

If you’re verifying identity for a government service rather than a private company, the agency’s own privacy policy will spell out retention and sharing rules, and it’s the more authoritative source for that specific transaction.

What to do when your identity information doesn’t match

Mismatches happen more often than people expect, usually because of a maiden name still on file, a recent move that hasn’t updated every record, or a simple data-entry error somewhere upstream. The first move is to check the details you entered against your ID exactly, since a mistyped middle initial or transposed digit in your Social Security number is a common culprit.

If the information matches your documents but still fails the automated check, most services offer a manual review path. This typically means a human reviewer looks at your submission directly, which can add a day or two but usually resolves straightforward mismatches.

For persistent failures, especially ones tied to a legal name change or a recent address update that hasn’t propagated through credit or government databases yet, switching to an in-person verification path often works better than repeated remote attempts. A person reviewing physical documents can account for context an algorithm can’t. If a discrepancy involves a government record, such as a Social Security Administration mismatch, contacting that agency directly to correct the underlying record is the more permanent fix, since the verification service is only checking against what already exists.

Whatever the cause, don’t just keep resubmitting the same information hoping for a different result. Fix the actual discrepancy first, or escalate to manual or in-person review.

Verifying non-citizen documents and work authorization cards

If you’re not a U.S. citizen, your document options look a little different, but the underlying I-9 framework still applies. A foreign passport generally isn’t accepted on its own for employment verification unless it’s paired with an approved arrival document, since a passport alone typically doesn’t establish employment authorization. A DHS-issued Employment Authorization Document, however, qualifies as a List A document by itself, covering both identity and work authorization in one card.

Green card holders can present their Permanent Resident Card, also a List A document. Some visa holders present a foreign passport along with a Form I-94 showing their authorized status, which together can satisfy List A depending on the specific visa category and endorsement.

The same core rules apply regardless of citizenship status: documents must be original, unexpired, and reasonably appear genuine on inspection. Employers still can’t demand a specific document over another, even when an employee’s status might make one option more convenient than another. If you’re unsure which combination applies to your situation, the USCIS handbook lists document combinations by category, and it’s worth checking against your specific visa or status type before your verification appointment.

Device and connectivity requirements for remote verification

Remote verification puts real demands on your hardware, and knowing them ahead of time saves you a failed attempt. A smartphone with a rear camera of reasonable resolution, generally anything from the last several years, handles document capture better than most laptop webcams, which tend to struggle with glare and fine text.

A stable internet connection matters more than raw speed. Verification sessions upload images and sometimes stream a short selfie video, so a spotty Wi-Fi connection that drops mid-session is more likely to cause a failure than a slightly slow one. If you’re on a shared or public network, a private connection or your phone’s cellular data often performs more reliably.

Browser compatibility can trip people up too. Some verification tools work best in a specific browser or require camera permissions to be explicitly granted, so check your device settings if the camera doesn’t activate on the first try. Keeping your device’s operating system and browser reasonably current also reduces compatibility issues, since older software sometimes lacks the camera APIs these tools rely on.

If your primary device consistently fails capture, switching to a different phone or tablet, rather than troubleshooting the same one repeatedly, is often the faster path to a successful session.

Setting up your space for a smooth remote check

The environment you verify in matters almost as much as the document itself. Natural daylight from a window, angled so it doesn’t create glare on the ID’s surface, generally beats overhead artificial lighting, which tends to cast shadows across raised text and photos.

Lay your ID flat on a plain, dark surface rather than holding it in your hand, since a steady, flat document photographs more sharply and avoids the motion blur that triggers a retry. Position the camera directly above the document rather than at an angle, and frame the shot so all four corners are visible with a small margin of background around them.

For the selfie step, find a spot with even light on your face and remove sunglasses, hats, or anything covering your features. A plain wall behind you, rather than a busy or reflective background, helps the system isolate your face cleanly. If you wear glasses that create glare, tilting your head slightly or removing them briefly for the shot usually resolves it.

Give yourself a few extra minutes before starting rather than rushing between browser tabs or phone apps. A calm, well-lit setup on the first attempt is almost always faster than three rushed retries.

When remote verification makes sense versus when to go in person

If you have a valid, unexpired photo ID and a phone with a decent camera and stable connection, remote verification is usually the faster path, and it works for most people most of the time. In-person verification earns its place when your remote capture keeps failing, when an agency specifically requires original document inspection, or when you don’t have reliable data or SSN records to complete the automated check.

Before you start, gather your original ID, your Social Security number if the service requires it, and any secondary documents your specific situation calls for. Confirm whether you need an appointment or a barcode ahead of time. When something doesn’t fit the standard flow, contact the requesting organization directly rather than guessing.

— Mustafa Abusharkh

Get identity verification built into your document workflow with BeeSign

If your business handles contracts, HR paperwork, or client onboarding regularly, verifying identity as a separate step from signing adds friction you don’t need. BeeSign’s Identity Verification product connects government ID capture directly to the Electronic Signatures workflow, so a signer’s identity gets confirmed and their signature gets recorded in the same pass.

• Government ID capture and biometric matching integrated with the signing process.
• White-label and bring-your-own-cloud options so the workflow runs under your own domain.
• A complete audit trail attached to every verified signature.

Visit the pricing page to compare the Individual plan at $9.99 per month against Enterprise options, or explore the full feature set to see how identity verification fits your existing process.

Sources

• USCIS: Acceptable documents for verifying employment authorization and identity (M-274)
• Login.gov: Requirements for identity verification
• Login

FAQ

What documents can be used for ID verification?

A government-issued photo ID such as a driver’s license, state ID, or passport satisfies most verification needs on its own. For employment verification specifically, you need either one List A document or a List B plus List C combination.

What documents do I need to get a REAL ID in Tennessee?

REAL ID requirements are set at the state level, so Tennessee’s Department of Safety and Homeland Security publishes the current document list for its residents, typically including proof of identity, Social Security number, and two proofs of residency. Check Tennessee’s own DMV site directly, since state-level REAL ID requirements aren’t covered by the federal I-9 or Login.gov sources this article draws from.

What documents do I need to get a REAL ID in Oklahoma?

Oklahoma’s Department of Public Safety sets its own REAL ID document requirements, generally covering proof of identity, Social Security number, and residency. As with any state-specific REAL ID question, confirm the current list on Oklahoma’s own state agency site rather than relying on federal employment-verification guidance.

What do I need to verify my ID?

At minimum, you need a valid, unexpired government-issued photo ID, and many services also check your Social Security number for identity resolution. For remote verification, you’ll also need a device with a working camera and a stable internet connection to complete live document and selfie capture.

Recommended

• Government ID Verification Workflow That Works
• Financial Services Document Verification That Works