What is a USCIS EB-5 Regional Center Audit?
Under the EB-5 Reform and Integrity Act of 2022 (RIA), a USCIS EB-5 Regional Center Audit is a legally mandated review conducted by the Immigrant Investor Program Office (IPO). By law, USCIS must audit every designated Regional Center at least once every five years. These audits utilize Generally Accepted Government Auditing Standards (GAGAS), commonly known as the Yellow Book, to rigorously evaluate a Regional Center’s operations, focusing on the flow of investor capital, internal controls, corporate governance, and adherence to U.S. securities and immigration laws. Failure to comply can result in the termination of the Regional Center’s designation, so understanding the process is critical.
The Source of Truth for Audit Compliance
Practical compliance requires frontline experience. Behring Regional Center successfully completed this process and received a formal IPO close-out letter of our EB-5 Regional Center Audit on February 20, 2026. The audit close-out demonstrates Behring Regional Center’s commitment to the highest standards of integrity, governance, and compliance oversight. Drawing on firsthand experience as a former IPO Adjudicator, our Compliance Director Greg Sheehan actively shapes and monitors our blueprint for success. In fact, we established these high standards long before the RIA elevated requirements across the industry and his involvement ensures ongoing readiness for audit testing.
The 14-Day Reality Check
The Source of the Ask: INA 203(b)(5)(E)(vii)(III) explicitly states that failure to consent to an EB-5 Regional Center Audit or deliberate attempts to impede it will result in the termination of the Regional Center’s designation. IPO enforces this by setting strict, rapid response deadlines.
The Reality: When the Notification Letter arrives, USCIS typically gives Regional Centers just 14 days to produce a staggering amount of documentation. Scrambling to compile items like organizational charts, 10-year litigation histories, marketing strategies, internal control policies, and granular financial data post-notice is a critical red flag.
Preparation requires establishing an ongoing “Audit-Ready” posture aligned with these four building blocks of Regional Center Compliance.
1. The “Magic Date” and Record Retention
The Source of the Ask: INA 203(b)(5)(E)(vii)(I) establishes the statutory record-keeping mandate for Regional Centers, specifically applying to materials created on or after the enactment of the RIA on May 14, 2022.
The Requirement: To satisfy the strict legal mandate, Regional Centers must maintain all operational and financial records created on or after that May 14, 2022 cutoff date.
The Execution: While the law specifies 2022, relying solely on that cutoff is a tactical error. Regulators frequently issue inquiries that bridge pre- and post-RIA activities to fully understand the lifecycle of an investment or the history of a corporate entity. Having older files readily available demonstrates operational maturity and total transparency.
2. Flow of Funds: Granular Capital Tracking
The Source of the Ask: INA 203(b)(5)(E)(vii) directs USCIS to specifically conduct “a review of the flow of immigrant investor capital into any capital investment project.”
The Requirement: Auditors fundamentally track capital from the investor to the New Commercial Enterprise (NCE) to the Job Creating Entity (JCE). They do not just want summaries; they want the exact, unbroken trail of documentation.As an example of granularity, this type of sequence would be typical and required on demand:
Subscription Agreement Signature Pages -> Investor-to-NCE Bank Wire Transfers -> NCE Master Spreadsheets -> NCE-to-JCE Draw Requests and Approvals -> NCE-to-JCE Bank Transfer Statements.
The Execution: Preparing for an EB-5 Regional Center Audit should actively improve your business operations. This includes standardizing the documentation associated with draw requests, formalizing post-deployment verification steps for affiliated job-creating entities, and enhancing internal recordkeeping to clearly reflect third-party fund administrator oversight activities, such as reconciliations and financial reporting.
3. System and IT Controls (Beyond the Bank)
The Source of the Ask: In April 2024, USCIS formally announced the adoption of Generally Accepted Government Auditing Standards (GAGAS / The Yellow Book) for all EB-5 Regional Center Audits. These government standards strictly require auditors to assess the reliability of a subject’s internal IT controls and data systems.
The Requirement: Internal controls extend far beyond who can sign a bank check. Regulators intensely scrutinize your entire technology stack and the segregation of duties.
The Execution: You must maintain a centralized “System Access Log.” For example, investor relations teams should have access to CRM data, while third-party fund administrators require distinct access to KYC/AML documentation, capital wire receipts, and accounting software (like QuickBooks) to track capital receipts and deployments.
4. Corporate Governance, Marketing Scrutiny, and Investment Strategy
The Source of the Ask: INA 203(b)(5)(H) requires Regional Centers to maintain policies and procedures that ensure program compliance, while the USCIS Policy Manual (Volume 6, Part G) directs the IPO to continuously evaluate whether a Regional Center is promoting economic growth and complying with securities laws.
The Requirement: An audit is a holistic review of corporate integrity. Regulators will scrutinize how you acquire investors and how you structure their investments.
The Execution: Be prepared to document your comprehensive multichannel marketing strategy, including Search Engine Marketing (SEM), organic SEO, webinar hosting, and direct referrals. Crucially, ensure that every employee, contractor, or third-party promoter who interfaces with the public has filed a Form I-956K or Form I-956H.
Note on Investment Structuring: If your Regional Center offers varying investment strategies—such as secured loan-style options (e.g., Berhing’s Max Protection) versus equity-style options (e.g., Behring’s Basic Income or Behring’s Wealth Builder)—you must prove they are separately structured, documented, and accounted for. Each NCE must maintain distinct financial statements, bank accounts, and offering documents consistent with its respective Form I-956F submission.
Frequently Asked Questions About USCIS EB-5 Regional Center Audits
How often can USCIS audit an EB-5 Regional Center?
Under the EB-5 Reform and Integrity Act of 2022, USCIS must audit every designated Regional Center at least once every five years. In practice, audits can occur more frequently if USCIS identifies risk factors or has open questions about a Regional Center’s filings, recordkeeping, or investor activity.
What happens if a Regional Center misses the 14-day response deadline?
The Notification Letter typically gives Regional Centers only about 14 days to produce extensive documentation. Failing to respond on time, refusing to consent to the audit, or materially impeding the process can trigger statutory consequences, including termination of the Regional Center’s designation under INA 203(b)(5)(E)(vii)(III). That is why we emphasize maintaining an “Audit-Ready” posture every day rather than scrambling after notice.
Does a clean audit guarantee future approvals or protect all past filings?
No. A successful audit close-out reflects that, at the time of the review, a Regional Center’s operations, records, and controls met the standards evaluated in that audit. It does not guarantee that all prior, current, or future petitions or applications will be approved, nor does it guarantee that USCIS will not conduct future audits or investigations. Each filing is still adjudicated on its own record.
What records must be kept after May 14, 2022, and for how long?
INA 203(b)(5)(E)(vii)(I) establishes the statutory record-keeping mandate for Regional Centers for materials created on or after May 14, 2022. As a practical matter, best practice is to maintain historical archives that bridge pre- and post-RIA activities, including offering documents, investor communications, capital flows, and internal policies. The goal is to preserve a complete lifecycle view for each project and each New Commercial Enterprise.
How should Regional Centers prepare their technology and systems for an audit?
Audits under Yellow Book standards require USCIS to evaluate the reliability of internal IT controls and data systems, not just bank signatures. Regional Centers should maintain a centralized system access log, clearly define user roles, and separate duties across CRM, fund administration, accounting, and document repositories. The objective is to show that only the right people have the right level of access to the right systems, with traceable activity.
Should a Regional Center respond alone, or work with legal and compliance advisors?
Based on our experience, a collaborative approach is best. Regional Centers should work closely with experienced immigration counsel, securities counsel, and, where appropriate, compliance consultants who understand both the RIA and Yellow Book requirements. At Behring, our audit preparation and live audit support were conducted hand-in-hand with our legal team to ensure that every response was accurate, complete, and consistent with our broader compliance posture.
Important Disclosures and Limitations
The information in this article is provided for general educational purposes only and does not constitute legal, tax, investment, or immigration advice. USCIS policies, regulations, and interpretations may change, and the application of the law depends on the specific facts of each case.
Nothing in this article guarantees any particular outcome in a USCIS adjudication, audit, investigation, or enforcement action. Past results, including Behring Regional Center’s successful audit close-out, do not predict or guarantee future results for any Regional Center, project, or investor.
Regional Centers, issuers, and investors should consult with their own qualified immigration counsel, securities counsel, and other professional advisors before taking any action based on the information discussed here. References to USCIS, the EB-5 Reform and Integrity Act of 2022, and other governmental authorities are for descriptive purposes only and do not imply any endorsement or approval by those agencies.
The Proactive Compliance Standard
Navigating an EB-5 Regional Center Audit is not a one-time event; it is a daily operational standard. The most effective defense in a USCIS audit is operating a transparent, rigorously documented business every single day. It’s critical to show the operational consistency internally, externally, and with every Regional Center filing like forms I-956F, I-956G, I-956H, and I-956K.
Achieving and maintaining this standard requires a strong partnership with experienced legal counsel. We want to extend our sincere gratitude to our legal team at KLDP LLP for their exceptional work and strategic guidance throughout our audit process. From helping us proactively establish an “Audit-Ready” posture to standing shoulder-to-shoulder with us on the live calls with USCIS auditors, their expertise was invaluable. We proudly share the celebration of our successful IPO close-out with their team and thank them for their dedication to our compliance success.