Started a New Job Online? Here's What's Really Happening to Your ID

Here's something that will flip your thinking: moving hiring online didn't make identity checks easier for HR teams. It made them harder — and created more paperwork, not less. The companies that thought they were going paperless discovered they were actually becoming document archivists with stricter rules and tighter deadlines than anything they'd dealt with before.

If you've started a new job recently, you've probably gone through an I-9. That's the federal form that proves you're legally allowed to work in the United States. In person, it takes about five minutes: you hand over your passport or driver's license, someone glances at it, and you're done. Remote? That five-minute check quietly becomes a multi-step verification process with a three-day deadline, years of recordkeeping requirements, and enough moving parts that even experienced HR professionals get tripped up.

So let's look at what's actually happening behind the scenes when your new employer asks you to upload your ID and jump on a video call.

The Three Layers That All Have to Pass

Think of remote I-9 verification as a three-legged stool. Pull out any one leg and the whole thing collapses. The three legs are: the document, the face, and the record of how the check was done.

Leg one: Is the document real? This sounds obvious, but it's genuinely hard to judge through a screen. When someone hands you a physical ID, you can feel the raised text, tilt it to see the hologram shift, check its weight. A high-resolution scan of a fake ID can look absolutely perfect on a monitor. Visual clarity on screen is not the same thing as physical authenticity — and that gap is exactly where document fraud slips through. This article is part of a series — start with Your Face Is Now Your Train Ticket And Nobody Asked You Firs.

Leg two: Does the face match the document? This is the live video step. According to SHRM, employers are required to conduct a live video interaction with the person presenting their documents — not just compare a selfie to an ID photo, but actually watch that person hold up the document in real time. The point is to confirm that the face on the ID and the face on the screen belong to the same human being, right now, not in a photo taken three years ago or lifted from someone else's profile.

Leg three: Can you prove you did it right? This is the part most people never think about. Every remote I-9 check has to leave a paper trail (a digital one, but still). Who reviewed the documents? When? What did they see? This audit trail — the timestamped record of every action taken — has to hold up if a government inspector shows up a year later asking questions.

That number has real teeth. An employer who hires 100 people a year is legally responsible for maintaining precise, version-correct records for hundreds of employees at any given moment. Miss the retention window, use an outdated form, or let the audit trail get corrupted? What was a minor administrative hiccup becomes evidence of negligence during a federal inspection.

The Misconception That Catches Everyone Off Guard

Here's where most people — including a lot of HR professionals — get it wrong: they think that if the liveness check passes and the face matches, the verification is done.

It's easy to see why. If the technology confirms someone is physically present (liveness detection — software that checks you're a real person and not a photo being held up to the camera) and the face on screen matches the face on the ID, that feels thorough. Two boxes checked. What else is there?

Quite a bit, actually. Previously in this series: Fake You Can Ruin Your Life In An Hour Courts Take Days.

Liveness detection proves someone is physically present. Facial matching — comparing measurements between two photos to confirm they show the same person — proves the faces match. But neither one tells you whether the ID document itself is genuine. Those are three separate questions, and they require three separate answers.

"Remote examination can make authenticity harder to assess" because employers rely on digital copies rather than direct handling of original documents — there is no texture to feel, no security features to examine under light, no weight or thickness to gauge. — Reporting in SHRM

Picture this scenario: a real person, physically present, holds up a convincingly forged ID to the camera. The liveness check passes — yes, there's a human there. The face match passes — the face on screen matches the photo on the (fake) ID. And yet the document is counterfeit. The whole verification just sailed through two technological checkpoints and landed on a complete fiction. That's why the live video step requires trained human judgment about whether the document looks genuine — not just an algorithm confidence score.

Technology helps a lot. But it doesn't replace the person who's supposed to notice that the ID's font is slightly off or the hologram doesn't shift the way it should.

The Clock Is Already Running

One more thing that surprises people: there's a hard deadline built into all of this. According to USCIS, employers must complete the verification within three business days of the employee's first day of work. If someone starts on Monday, everything has to be done by Thursday. No exceptions. No "we got busy." Missing that window isn't a do-over situation — it's an audit flag that can lead to fines and, in serious cases, grounds for termination of the employment itself.

Here's a good analogy for the whole thing. Remote I-9 verification is like inspecting a building through a video call instead of walking through it in person. You can see everything on the surface. But you can't tap the walls for hollow spots. You can't feel whether the floor is sagging. You can't smell if there's a gas leak. You have to trust what the camera shows — and then document every single thing you looked at in case an inspector comes back later and asks whether your walkthrough was thorough enough. The inspection feels faster in the moment. The paperwork that follows is substantially heavier.

The Cascade Risk Nobody Talks About

There's one final wrinkle that's worth knowing, especially if you're on the HR side of this. Remote verification often runs through specialized software platforms. If one of those platforms has a significant technical failure — a broken audit trail function, a misconfigured data field — the government can potentially invalidate all the I-9 records created through that system during that period. Not some of them. All of them. Up next: Ai Facial Recognition Doorbell Cameras Lawsuits Privacy.

That's the cascade risk. One software problem doesn't just create one bad record. It can call an entire cohort of new hires into question, requiring the employer to reverify everyone — often on a tight timeline, while still running normal operations. The SHRM reporting on this makes clear that federal inspectors routinely audit employers to confirm that remote verification systems are functioning correctly and that document copies are being retained as required. It's not a theoretical risk. Audits happen.

This is also why, at CaraComp, we think about identity verification as a layered problem rather than a single-score solution. No one confidence number from one algorithm should be carrying the whole decision about whether a person is who they say they are. The document, the face, and the record of the process all have to work together — because any one of them, alone, can be fooled or lost.

So here's the question worth sitting with: if you were the one reviewing a remote hire, which would worry you more — a blurry ID photo, a suspiciously perfect-looking selfie, or a process that left no record of how the check was done? The blurry photo is annoying. The perfect selfie might even feel reassuring. But the missing record? That's the one that follows you into a federal audit two years later, when everyone involved has already forgotten what actually happened on that video call.

The paperwork, it turns out, is the verification.