How-to
How to stop buddy punching
By the TrackBadges team · Updated · 7 min read
The short answer
Buddy punching is when one employee clocks in or out for a coworker who isn't actually working, usually to cover a late arrival or an early exit. The reliable fix is a clock-in that proves the person is present: a supervisor who sees each worker being clocked in, a biometric or photo check, or a location check, backed by a written policy with clear consequences.
Key takeaways
- Buddy punching means recording time for a coworker who isn't there.
- Fifteen padded minutes a day across 10 people at $20 an hour is $12,500 a year.
- The fix is proof of presence: a supervisor watching, a photo or fingerprint, or a location check.
- A written policy matters as much as the tool: call it falsifying time records and say what happens.
- It's a common firing offense; whether it's also a crime depends on the facts and the state.
What is buddy punching?
Buddy punching is recording time for a coworker who isn't actually working: clocking them in before they arrive, or out after they've left. It's the most common kind of time theft, and it works on almost any clock, from punch cards and shared PINs to app logins, badges and paper sign-in sheets.
Typical versions:
- Punching a friend's card or scanning their badge when they're running late.
- Clocking out for someone who left early.
- Sharing a PIN or app password so a coworker can punch from anywhere.
- Writing a friend's start time on a shared paper sign-in sheet.
It isn't buddy punching when a supervisor clocks in someone who is there and working. That's a normal, legal way to keep records, as long as the record is accurate; see can a manager clock employees in.
Why buddy punching happens
Most buddy punching is small and social rather than organized fraud: covering for a friend who's ten minutes late. It thrives when the clock makes it easy and nobody checks.
- Strict lateness rules. If two late arrivals mean a write-up, covering for a friend feels like a favor.
- Shared rides. One person drives the group, so whoever reaches the clock first punches for everyone.
- Shared credentials. PINs and app logins get passed around, and nothing ties them to a face.
- Unattended clocks. A kiosk or wall clock with nobody nearby can't tell who is pressing the buttons.
- Paper sheets. Anyone can write any name and any time.
What buddy punching costs
Buddy punching costs the paid minutes nobody worked, plus any overtime and payroll taxes on them. Small amounts add up because they repeat every shift.
A worked example: 10 employees each pad 15 minutes a day, at $20 an hour, over 250 workdays a year.
- 15 minutes × 10 people = 150 minutes a day, which is 2.5 hours.
- 2.5 hours × $20 = $50 a day.
- $50 × 250 days = $12,500 a year, before payroll taxes.
The same arithmetic at other sizes, still at $20 an hour and 250 days:
| Minutes padded per person per day | 5 people | 10 people | 25 people |
|---|---|---|---|
| 5 minutes | $2,083 | $4,167 | $10,417 |
| 15 minutes | $6,250 | $12,500 | $31,250 |
| 30 minutes | $12,500 | $25,000 | $62,500 |
These show the math, not industry averages, so plug in your own numbers. Two costs don't appear in the table. Padded minutes that push someone past 40 hours are paid at time and a half. And a record that says someone is on site when they aren't is wrong at the worst possible moment: during an evacuation, when the emergency roll call counts a person who was never there.
How to tell if buddy punching is happening
Look for patterns, not single odd punches.
- Several punches seconds apart on one device for people who don't arrive together.
- Someone on the clock who can't be found, or whose work isn't getting done.
- Clock-in times identical to the minute every day.
- Punches from a device or location that doesn't match where the person works.
- Hours that don't match gate logs, deliveries or the supervisor's own notes.
If you see a pattern, compare a week of punches with who the supervisor actually saw at the start and end of each shift. Don't accuse anyone over a single data point.
Ways to stop buddy punching, compared
Every method that works adds proof that the right person is physically present when the punch happens. They differ in cost, privacy and how much they slow the line.
| Method | How it proves presence | How well it stops buddy punching | Cost and setup | Trade-offs |
|---|---|---|---|---|
| Supervisor-scanned badge | A supervisor sees each person as their badge is scanned | Strong, when a supervisor is there at the start and end | Low: printed badges and a phone | Needs a lead present at clock-in and clock-out |
| Biometric clock | A fingerprint, face or hand scan matches the employee | Strong | A device per entrance | Consent and retention laws in several states; gloves and dirty hands cause failures |
| Photo capture | The kiosk or app takes a photo with each punch | Good, if someone reviews the photos | Often included in kiosk apps | Only deters if checked; face matching can count as biometrics |
| GPS or geofence | The employee's phone must be inside a boundary | Partial: proves a phone is there, not who holds it | Needs every employee's smartphone | Phones can be handed over and locations spoofed; privacy concerns |
| PIN or password | The employee types a secret code | Weak: PINs get shared | Free | Stops mistakes more than cheating |
| Written policy alone | Rules and consequences | Deterrent only | Free | Nothing enforces it |
Combinations work well: a PIN plus photo capture at a kiosk, or GPS plus a selfie for solo field workers. Before buying a fingerprint or face clock, read biometric time clock laws; Illinois alone has produced years of class actions over missing consent forms.
A sample buddy punching policy
A good policy says what counts, calls it falsifying time records, names the consequences for both people involved, and promises pay for all time actually worked. Adapt this wording for your handbook:
- Your own time only. Only you may record your own time. Clocking in or out for another employee, or asking someone to do it for you, is falsifying time records.
- Missed punches. If you forget to clock in or out, tell your supervisor the same day so the record can be corrected. Every correction is logged.
- Consequences. The employee who records time for someone else and the employee whose time was recorded are both subject to discipline, up to and including termination.
- Pay for all work. You will be paid for all time you actually work. Tell your supervisor about any work time that wasn't recorded.
The last line matters. Under the Fair Labor Standards Act you must pay for all hours worked, so the policy is about accurate records, not just catching people. Have each employee sign it, and apply it the same way to everyone.
Is buddy punching illegal?
Usually buddy punching is a serious policy violation rather than a crime in itself, but it can become one. Being paid for hours you didn't work means taking wages you didn't earn, and in serious or repeated cases employers have reported it as theft or fraud. Whether charges are possible depends on the state, the amount and the facts.
For employers, no federal law requires a particular way to prevent buddy punching. What the FLSA does require is an accurate record of the hours each employee works each workday and each workweek (29 CFR 516.2(a)(7)). A clock that's easy to fool makes those records harder to defend.
Can you be fired for buddy punching?
Yes, in most cases. Most US jobs are at-will, and falsifying time records is a common reason for termination, for both the person who punched and the person who benefited. Where a union contract requires just cause, falsified time records are commonly treated as just cause. Depending on the state, a firing for it may also affect unemployment benefits.
A step-by-step plan to stop buddy punching
Put the pieces together in this order. A small crew can get through the first four steps in a week.
- Measure first. Compare a week of punches with who the supervisor actually saw at the start and end of each shift.
- Pick a check that fits how your crew starts work. A supervisor scan for crews that start together, photo capture or biometrics at an unattended door, GPS for solo workers.
- Retire shared credentials. Stop shared PINs, shared logins and open paper sign-in sheets.
- Publish the policy. Hand out the written policy, explain it, and collect signatures.
- Review exceptions every week. Look at edits, missed punches, automatic clock-outs and punches from unexpected places before approving timesheets.
- Apply it consistently. Give the same consequence for the same conduct, every time.
How a supervisor-scanned badge clock handles it
With a badge time clock like TrackBadges, every employee carries a printed QR badge and a supervisor scans it with their phone, so the person clocking someone in has seen them standing there. A coworker can't scan a friend in from the parking lot, because they don't hold the scanner. Every punch also records which scanner made it, where, and optionally a GPS stamp, and a lost badge can be reissued so the old one stops working. The trade-off is that someone has to be there to scan: it fits crews that start together, not solo workers spread across town.
Frequently asked questions
What is buddy punching?
Buddy punching is when one employee clocks in or out for a coworker who isn't actually working, usually to cover a late arrival or an early exit. It's a form of time theft and works on punch cards, PINs, app logins, badges and paper sign-in sheets.
Is it illegal to clock in for someone else?
Clocking in a coworker who isn't working is usually a serious policy violation that can get both people fired, and in serious cases it can be treated as theft or fraud, depending on the state and the amount. Entering time for someone who is actually working, like a supervisor scanning a crew in, is legal as long as the record is accurate.
Can you be fired for buddy punching?
Yes. Most US employment is at-will, and falsifying time records is a common reason for termination, both for the person who punched and the person who benefited. Depending on the state, it may also affect unemployment benefits.
Do QR code time clocks stop buddy punching?
Only if someone checks who is being scanned. A QR badge at an unattended kiosk can be scanned by a friend, just like a punch card. When a supervisor scans each badge, they see each person, which stops buddy punching without collecting biometrics.
Are biometric time clocks the best way to stop buddy punching?
They're effective, but they come with legal requirements. Illinois's BIPA, for example, requires written notice, a signed release and a public retention policy before collecting fingerprints or face scans, and other states have their own rules. A supervisor-scanned badge or photo capture stops most buddy punching without biometrics.
How do you prove buddy punching?
Look for patterns: punches seconds apart on one device, people on the clock who can't be found, or punches from places they weren't. Compare punches with supervisor observations, gate logs or camera footage, and document what you find before taking action.
Keep reading
- Badge time clockA badge time clock with no reader to buy: print QR ID badges for your crew and scan them with any phone or tablet. Nothing to mount. Free for 3 people.
- Crew time clockA crew time clock where the foreman scans each worker's QR badge with one phone: 8 people clocked in in under a minute, no app for the crew. Free for 3 people.
- Can a manager clock you in?Yes, a manager can clock employees in and out. The law requires accurate time records, not a particular person. Editing time to cut pay is illegal.
- Biometric time clock lawsBiometric time clocks are legal, but Illinois BIPA, Texas, Washington and Colorado set notice, consent and retention rules. A checklist and safer alternatives.
- How QR code time clocks workA QR code time clock records a punch when a code is scanned. Compare the 3 designs, how each resists cheating, setup steps, costs and what a punch records.
- QR vs NFC vs biometric clocksEvery type of time clock compared: PIN, punch card, RFID badge, NFC, QR code, biometric and GPS apps, by cost, phones needed, buddy-punch risk and privacy risk.
Clock your crew in with one phone.
Print a QR badge for everyone and scan them in and out with any phone or tablet. Free for up to 3 people — try it with your real crew before you sign up.