The penalty applies whether or not the employer knew about the breach — it's a strict-liability offence. The only complete defence is a "statutory excuse": evidence that a compliant right to work check was carried out before the worker started, retained, and refreshed where appropriate. UKVI publishes the names of employers fined every quarter on GOV.UK — public-record reputational damage often exceeds the financial penalty itself.