Right-to-work Checks in Australia (2026): Employer Compliance Checklist

Right to work checks australia obligations have moved from a back-office formality to a front-line compliance risk, and in 2026 the margin for error has narrowed considerably. Tighter arrival control settings and heightened sponsor obligations mean employers who onboard a worker without verifiable evidence of visa status are exposed to civil penalties, sponsor sanctions, and reputational damage. This guide is a practical, employer-focused playbook: it sets out exactly how to verify work rights, which records to keep, how long to keep them, and what to do if the Department of Home Affairs comes knocking. Every step is designed to be defensible, meaning it will stand up under audit rather than merely tick a box.

Quick summary & TL;DR checklist, what to do now

If you only have five minutes, action the list below. These are the minimum steps that make right to work checks australia employers can defend under scrutiny, rather than checks that merely feel diligent.

• Run VEVO (Visa Entitlement Verification Online) for every non-citizen hire and capture the result.
• Screenshot and save the VEVO result with the transaction reference, date, and the name of the staff member who ran it.
• Collect copies of the passport and visa grant notice (or ImmiCard) before the first day.
• Inspect the original documents in person on day one and record document type, number, and expiry.
• Store scans in the employee’s sponsor file and your central register, not in a personal inbox.
• Date-stamp every check and have the HR officer sign off by name and role.
• Diarise visa expiry dates and schedule re-verification before any expiry.
• Obtain an employee attestation confirming the accuracy of the documents provided.
• Keep payroll and contract records aligned with the immigration file.
• Escalate unusual cases (bridging visas, offshore applicants, refugees) to your immigration adviser before employment begins.

Immediate 5-step action for onboarding new hires

1. Run VEVO as soon as you have the candidate’s passport and visa details.
2. Request copies of the passport and visa grant notice with the offer.
3. Inspect originals on day one and photograph/scan them with a date stamp.
4. Record the check in your register with the officer’s name and the VEVO transaction ID.
5. File everything together and set a re-check reminder tied to the visa expiry.

3-step actions if you already employ someone without evidence

1. Run VEVO now to confirm current work rights, and document the result immediately.
2. Request copies of the current passport and visa, and inspect the originals.
3. If VEVO is inconclusive or work rights are restricted, seek immediate legal advice before continuing to roster the worker.

For official, no-cost guidance you can rely on, the Department of Home Affairs publishes VEVO and sponsor-obligation pages, and the Fair Work Ombudsman covers employment record requirements. These are the primary reference points, use them before relying on any secondary summary.

Why 2026 changes make defensible right to work checks australia essential

The direction of travel is unambiguous: enforcement is tightening, sponsor obligations are being read more strictly, and the Department is increasingly willing to act on record-keeping failures rather than only on knowingly unlawful hiring. The practical effect for employers is that a defensible process, one that produces a dated, auditable evidence trail, is no longer optional. A check you cannot evidence is, for compliance purposes, a check you did not perform.

Summary of the regulatory framework

The Migration Act 1958 remains the primary statute governing visa status and employer obligations, supported by the Migration Regulations 1994, which prescribe the detailed conditions attached to individual visa classes. Relevantly, the Act contains work-related offence and civil-penalty provisions (introduced through amendments relating to the employment of unlawful non-citizens) that apply where a person allows, or refers for, work by someone without the required work rights. Industry observers expect audit activity to focus on whether employers can produce contemporaneous evidence of verification at the point of hire, not just assurances after the fact. The likely practical effect is that employers who rely on informal, undocumented checks will be the first to attract regulator attention.

What auditors will look for, common employer failures

When the Department reviews a sponsor or employer, the recurring gaps are predictable. Knowing them lets you close them in advance.

• No VEVO evidence. A check was performed but no screenshot, transaction ID, or date was retained.
• Unverified copies. Plain photocopies of passports or visa labels with no verification of authenticity.
• Missing sign-off. Records that do not identify who conducted the check or when.
• No re-verification. Temporary visa holders whose status lapsed without a follow-up check.
• Disconnected records. Payroll and contract files that do not reconcile with the immigration file.
• Deleted or overwritten records. No immutable log and no version control over who changed what.

Penalties & sanctions employers face

Employers who allow a non-citizen to work without the required work rights, or who fail to meet sponsor obligations, face a layered set of consequences under the Migration Act framework. The table below summarises the categories of exposure.

The specific penalty amounts are set by reference to penalty units under Commonwealth law and are periodically indexed, so you should confirm current figures with the Department of Home Affairs rather than relying on any fixed number. For context on the scale of migration driving these settings, the Australian Bureau of Statistics publishes aggregate migration data; employers operating in high-intake sectors should assume that the volume of non-citizen workers increases, rather than reduces, the likelihood of a check being scrutinised.

How to verify right to work, comparison table

There is no single “correct” verification method for every hire, but there is a correct method for each situation, and taking a position on that is exactly what employers need. The four approaches below differ sharply in evidentiary weight and liability exposure. Read the comparison, then apply the decision framework that follows; do not default to the quickest option simply because it is quickest.

Short how-to for VEVO

VEVO (Visa Entitlement Verification Online) is the Department of Home Affairs’ free tool and is treated as the authoritative live record of a person’s visa and work entitlements. To run a defensible VEVO check:

1. Obtain the worker’s consent and their passport or ImmiCard details, date of birth, and visa grant number (or another document identifier accepted by VEVO).
2. Submit the details through the Department’s VEVO service on the Home Affairs VEVO page.
3. Capture a screenshot of the full result, including the visa class, work entitlement, any conditions, and the transaction reference.
4. Record the date and the name of the staff member who conducted the check on the saved file.
5. File the screenshot in both the employee record and your central register.

When manual checks are acceptable, limits and risks

Manual document inspection, sighting a passport and a visa grant notice, supports a VEVO check but should rarely stand alone. The core risk is authenticity: a plain photocopy proves nothing about validity, and visa conditions can change after a document is issued. Manual checks are appropriate as a supplement, or where the visa class is not VEVO-enabled, but in those cases you should retain verified copies and confirm currency through another channel. Treating a photocopied passport as sufficient evidence is one of the most common and least defensible mistakes employers make.

Decision framework, which method to choose

Take a clear position rather than hedging. Use the following framework to select your verification approach:

• Choose VEVO-only when the role is low-risk, VEVO shows ongoing unrestricted work rights, and you capture a dated screenshot with staff sign-off. This is often sufficient for short-term and temporary hires where the result is unambiguous.
• Choose the Defensible Pack when you are an approved sponsor, hiring for a medium-to-long-term position, or recruiting in a high-risk sector such as aged care or health. Collect VEVO evidence, copies of key documents, an employee attestation, and payroll evidence. This is the recommended default for sponsors.
• Choose manual document checks when the visa is not present in VEVO, for example, certain offshore or bridging scenarios, in which case obtain and retain verified copies and seek legal advice before employment begins.

Our recommendation for any sponsor is unambiguous: build the Defensible Pack by default. The incremental time cost is small against the downside of a sponsor sanction, and the Pack is the only approach that reliably survives a Department audit.

Step-by-step defensible right to work checks australia process

This is the playbook. Follow it in sequence, assign a named owner to each stage, and store the output as a single bundle per employee. Executed consistently, these steps produce the audit evidence that defensible right to work checks australia employers are expected to hold.

Pre-hire / offer stage checks

Verification should begin before the offer is finalised, not on day one. At this stage:

• Run VEVO and capture the screenshot plus the VEVO transaction ID.
• Request the candidate to produce a passport and visa grant notice, or an ImmiCard where applicable.
• For sponsored roles, obtain copies of each document for the file.
• Confirm that the visa work entitlement matches the proposed role, hours, and location.
• Owner: recruiting manager or HR, with the result filed before a contract is issued.

Onboarding / first-day checks

On the first day, inspect the originals in person. A remote candidate should present documents via a verified live video check, with a note recording the method.

• Inspect the original passport and visa evidence.
• Record the document type, number, issue date, and expiry date.
• Take dated photographs or scans of each document.
• Have the HR officer sign off by name and role, confirming the originals were sighted.
• Owner: HR officer, with the completed record added to the employee file.

Ongoing checks and periodic re-verification

Work rights are not static. Temporary visas expire, conditions change, and bridging arrangements shift. Build re-verification into your calendar:

• Re-run VEVO at defined intervals, for example, every six months for temporary visa holders.
• Re-run VEVO immediately whenever a visa expiry is approaching.
• Record each re-check with a fresh screenshot, date, and staff sign-off.
• Owner: payroll or HR, driven by an automated reminder tied to expiry dates.

Special cases

Some scenarios carry elevated risk and should be escalated to your legal team before employment proceeds. These include bridging visa holders (whose work rights may be restricted), offshore applicants whose visas are not yet granted or not VEVO-enabled, ImmiCard holders, and refugees or people seeking asylum whose entitlements can be condition-specific. In each case, obtain verifiable evidence, confirm current conditions through VEVO where available, and document the advice you received. Do not assume entitlement from the visa label alone.

Template language to use

Standardised wording removes ambiguity and strengthens your audit trail. Adapt the following to your business, these are sample templates and not legal advice.

• Employee attestation. “I confirm that the identity and visa documents I have provided are true, complete and current, and I will notify [employer] immediately of any change to my visa status or work entitlements.”
• HR sign-off. “I, [name, role], confirm that I sighted the original documents listed above on [date] and that they match the VEVO result retained on file (transaction ID: [ID]).”
• Record label. “Right-to-work verification, [employee name], VEVO run [date] by [officer], next re-check due [date].”

Record-keeping, sponsor obligations & audit resilience

A verification is only as strong as the record that survives it. The Department of Home Affairs requires sponsors to keep certain records and to produce them on request, as set out on the Home Affairs employing and sponsoring pages. Record-keeping is therefore where many otherwise-compliant employers fall down, the checks were done, but the evidence cannot be found quickly or cannot be proven to be contemporaneous.

Minimum sponsor file contents

For each sponsored worker, your staff file and sponsor central register should contain, at minimum:

• The signed offer letter and employment contract.
• The VEVO screenshot with transaction ID, date, and operator name.
• Copies of the passport and visa grant notice.
• Payroll records demonstrating the terms actually paid.
• Labour Market Testing evidence where the visa stream requires it.
• Any training or benefit records relevant to sponsor obligations.

Data protection & privacy considerations

Immigration documents contain sensitive personal information and are subject to the Privacy Act 1988 and the Australian Privacy Principles. Store them securely, restrict access to staff with a genuine need, and maintain an access log. Avoid holding verification evidence in personal email folders or unsecured shared drives. A clear retention and access policy both protects the individual and demonstrates to an auditor that your records are controlled rather than scattered.

Recommended retention periods and version control

Retain verification and sponsor records in line with the Department’s sponsor record-keeping requirements and your employment-record obligations under the Fair Work framework, which governs the payroll and contract records that frequently intersect with immigration audits. Confirm current retention periods with the Department and the Fair Work Ombudsman, as these are prescribed and periodically updated. Use immutable logs and version control so that each check records who conducted it, when, and what changed, never overwrite an earlier record. When a worker’s status is re-verified, add the new record alongside the old one rather than replacing it.

For employers wanting official guidance at no cost, the Department of Home Affairs and the Fair Work Ombudsman both publish employer resources, and community legal centres can assist smaller businesses that need help interpreting their obligations.

If you are audited or receive a compliance notice, stepwise response

A compliance notice is a time-sensitive event. The quality of your first 24 hours often shapes the outcome, so act methodically rather than defensively.

24-hour actions after notice

• Preserve all relevant files immediately and suspend any routine deletion.
• Halt any document destruction cycles that might touch the records in scope.
• Identify the named contact and the deadline in the notice.
• Obtain legal counsel before responding substantively.

Follow-up actions

• Assemble and index the requested records into a complete, ordered bundle.
• Prepare the sponsor response addressing each point raised.
• Identify any gaps and consider voluntary rectification where appropriate.
• Where more time is genuinely needed, request an extension in writing before the deadline.

Mitigation tactics

Cooperation is consistently valued by regulators. Demonstrate good faith through prompt, organised production of records, remedial training for the staff responsible for checks, and, where a genuine failure has occurred, considered voluntary disclosure under legal advice. A sample acknowledgement-and-extension request is included in the downloadable templates; adapt it to your circumstances and have it reviewed before sending.

Templates, downloads and next steps

HR teams implementing right to work checks australia processes should build from standardised assets: a copy-ready onboarding checklist, a sample employee attestation, a record-log spreadsheet, and an audit-response email template. Each is provided as a sample to adapt to your business, they are illustrative and not legal advice. For sponsor audit support or help designing a defensible verification workflow, consult a qualified immigration lawyer or a registered migration agent. You can find relevant practitioners through the Immigration practice area, Australia hub and the lawyer directory, immigration lawyers in Australia.

Conclusion

In 2026, right to work checks australia employers treat as a documented, repeatable process, rather than an informal glance at a passport, are the ones that will weather tighter enforcement and sponsor scrutiny. The position this guide takes is clear: run VEVO for every non-citizen hire, build the Defensible Pack by default if you are a sponsor, keep contemporaneous and immutable records, and have an audit-response plan ready before you ever need it. Do that consistently, and a compliance notice becomes a matter of producing files rather than a crisis. The cost of building the process is modest; the cost of a sponsor sanction is not.

Sources

1. Migration Act 1958 (consolidated), Federal Register of Legislation
2. Migration Regulations 1994, Federal Register of Legislation
3. Department of Home Affairs, VEVO (check visa details)
4. Department of Home Affairs, Employing and sponsoring someone / employer obligations
5. Administrative Review Tribunal (ART)
6. Fair Work Ombudsman, employer obligations & record keeping
7. Australian Bureau of Statistics (ABS), migration statistics