Buddy Punching: What It Is & How to Stop It
Buddy punching, one employee clocking in for another, is one of the most common and costly forms of time fraud. Here is what it is, how much it quietly costs, and how to stop it without treating honest employees like suspects.
Buddy punching happens when one employee clocks in or out on behalf of another who is late or absent. It sounds minor, but across a workforce it adds up to significant payroll leakage. This guide explains how it works, what it costs, and the fair, modern ways to eliminate it.
What is buddy punching?
Buddy punching is when a colleague clocks in or out for an employee who is not actually there. It is a form of time theft, the employer pays for hours that were never worked.
How much does buddy punching cost?
Even a few minutes per employee per day compounds fast. Across a large hourly workforce, buddy punching and related time fraud quietly drain a meaningful share of payroll every year, money paid for phantom hours.
How buddy punching happens
It thrives on weak clock-in systems: shared PINs, paper sheets, or honor-system spreadsheets that anyone can fill in for anyone. The easier the system is to fake, the more it happens.
Attendance Integrity, This Month
Verified clock-ins
Clock-in method
▲ Buddy punching down 75% after verified clock-in.
Illustrative eMonitor dashboard.
How to stop buddy punching
- Biometric clock-in: fingerprint or face verification ties attendance to the actual person.
- Geofencing: location-based clock-in confirms presence (GPS tracking).
- Automatic time tracking: ties hours to real device activity (work hours tracking).
- Attendance software: replaces fakeable sheets (attendance tracking).
Put an End to Phantom Hours
eMonitor ties attendance to real activity and verifiable clock-in, so you only pay for work that actually happened.
Stop it fairly
Frame the change as accuracy and fairness, not suspicion, accurate records protect honest employees too. Communicate why you are upgrading the system, and pair it with a clear policy. See best practices for the rollout conversation.
Buddy punching and the law
Legally, buddy punching is time fraud: an employee is paid for hours not worked, on records both employees falsified. In the United States that exposes the workers involved to termination for cause and, in serious or repeated cases, to civil recovery of the stolen wages; employers have successfully pursued repayment where the pattern was documented.
There is an employer-side exposure too. Wage-and-hour law requires accurate time records, and payroll built on falsified punches misstates hours, overtime calculations, and in regulated industries, compliance attestations. An employer who knows punches are unreliable and pays them anyway is not just losing money; it is certifying records it has reason to doubt.
Handling a discovered case deserves the same discipline as any conduct issue: document the specific punches, interview both employees, apply the policy consistently regardless of who is involved, and correct the payroll record. Inconsistent enforcement, punishing one pair while excusing a popular team's identical habit, creates legal risk greater than the original fraud.
Writing a time-punch policy that prevents it
Prevention starts with a policy that removes ambiguity. Define buddy punching plainly, state that clocking in or out for another person is falsification of company records, name the consequences for both participants, and require that credentials, badges, and PINs are personal and never shared. Most first offenses happen in workplaces where none of this was ever written down.
Pair the rules with a humane correction path. Much buddy punching begins as a favor culture around genuine problems: an unreliable bus, a childcare handoff, a manager who punishes five late minutes harshly. A simple self-correction process for honest lateness, and a little schedule flexibility, removes most of the demand for the favor in the first place.
Communicate the policy as protection rather than accusation: accurate records protect everyone's pay, overtime, and hours-based benefits, and they protect the honest majority from quietly subsidizing the exceptions, the same framing our complete guide to time theft recommends for the broader problem.
How to audit your timesheets for it
Buddy punching leaves fingerprints in the data. The classic patterns: pairs of employees whose punches land within seconds of each other repeatedly, punch-in clusters at exactly shift start from a single kiosk, employees whose recorded arrival never varies by a minute across months, and punched hours with no corresponding activity on the person's devices or systems.
A quarterly audit is straightforward: export three months of punches, sort for paired timestamps and impossible consistency, and cross-check flagged cases against schedules, door access, or device activity. A handful of coincidences is normal; the same pair, twenty times, is not. Our guide to tracking employee attendance covers the tooling side.
The strongest audit is structural: tie time records to something an individual actually does rather than something anyone can press. Activity-based time tracking, where recorded hours correspond to real device activity, makes the fraud mechanically difficult instead of merely forbidden, which is why it outperforms both paper sheets and shared-kiosk punching.
Eliminate buddy punching with eMonitor
eMonitor ties attendance to real device activity and supports modern, verifiable clock-in, so phantom hours disappear and your payroll reflects the work that actually happened. Start free in minutes.