Be on alert for e-mails sent from the address firstname.lastname@example.org that appear to be coming from U.S. Citizenship and Immigration Services (USCIS) requesting Form I-9 (Employment Eligibility Verification) information. Employers are not required to submit Forms I-9 to USCIS.
U.S. Form I-9 contains sensitive personal identifying information such as:
- Employee’s full legal name
- Date of birth
- Social Security Number or Alien Number.
These emails are part of a phishing scam and the USCIS is advising employers not to respond to these e-mails or to click on the links in them.
If you have received a scam e-mail, you should report the incident on the FTC Complaint Assistant web page on the Federal Trade Commission’s website:
Any employers who are unsure if they have been sent a fraudulent email should forward the suspicious e-mail to the USCIS webmaster: USCIS.Webmaster@uscis.dhs.gov
The email will then be reviewed and if appropriate shared with law enforcement. Remember, even if the request appears to come from a legitimate source, never send unsecured forms or other documents containing personal identifiable information.