How-to

How to stop buddy punching

By the TrackBadges team · Updated · 7 min read

The short answer

Buddy punching is when one employee clocks in or out for a coworker who isn't actually working, usually to cover a late arrival or an early exit. The reliable fix is a clock-in that proves the person is present: a supervisor who sees each worker being clocked in, a biometric or photo check, or a location check, backed by a written policy with clear consequences.

Key takeaways

  • Buddy punching means recording time for a coworker who isn't there.
  • Fifteen padded minutes a day across 10 people at $20 an hour is $12,500 a year.
  • The fix is proof of presence: a supervisor watching, a photo or fingerprint, or a location check.
  • A written policy matters as much as the tool: call it falsifying time records and say what happens.
  • It's a common firing offense; whether it's also a crime depends on the facts and the state.

What is buddy punching?

Buddy punching is recording time for a coworker who isn't actually working: clocking them in before they arrive, or out after they've left. It's the most common kind of time theft, and it works on almost any clock, from punch cards and shared PINs to app logins, badges and paper sign-in sheets.

Typical versions:

  • Punching a friend's card or scanning their badge when they're running late.
  • Clocking out for someone who left early.
  • Sharing a PIN or app password so a coworker can punch from anywhere.
  • Writing a friend's start time on a shared paper sign-in sheet.

It isn't buddy punching when a supervisor clocks in someone who is there and working. That's a normal, legal way to keep records, as long as the record is accurate; see can a manager clock employees in.

Why buddy punching happens

Most buddy punching is small and social rather than organized fraud: covering for a friend who's ten minutes late. It thrives when the clock makes it easy and nobody checks.

  • Strict lateness rules. If two late arrivals mean a write-up, covering for a friend feels like a favor.
  • Shared rides. One person drives the group, so whoever reaches the clock first punches for everyone.
  • Shared credentials. PINs and app logins get passed around, and nothing ties them to a face.
  • Unattended clocks. A kiosk or wall clock with nobody nearby can't tell who is pressing the buttons.
  • Paper sheets. Anyone can write any name and any time.

What buddy punching costs

Buddy punching costs the paid minutes nobody worked, plus any overtime and payroll taxes on them. Small amounts add up because they repeat every shift.

A worked example: 10 employees each pad 15 minutes a day, at $20 an hour, over 250 workdays a year.

  • 15 minutes × 10 people = 150 minutes a day, which is 2.5 hours.
  • 2.5 hours × $20 = $50 a day.
  • $50 × 250 days = $12,500 a year, before payroll taxes.

The same arithmetic at other sizes, still at $20 an hour and 250 days:

Minutes padded per person per day5 people10 people25 people
5 minutes$2,083$4,167$10,417
15 minutes$6,250$12,500$31,250
30 minutes$12,500$25,000$62,500

These show the math, not industry averages, so plug in your own numbers. Two costs don't appear in the table. Padded minutes that push someone past 40 hours are paid at time and a half. And a record that says someone is on site when they aren't is wrong at the worst possible moment: during an evacuation, when the emergency roll call counts a person who was never there.

How to tell if buddy punching is happening

Look for patterns, not single odd punches.

  • Several punches seconds apart on one device for people who don't arrive together.
  • Someone on the clock who can't be found, or whose work isn't getting done.
  • Clock-in times identical to the minute every day.
  • Punches from a device or location that doesn't match where the person works.
  • Hours that don't match gate logs, deliveries or the supervisor's own notes.

If you see a pattern, compare a week of punches with who the supervisor actually saw at the start and end of each shift. Don't accuse anyone over a single data point.

Ways to stop buddy punching, compared

Every method that works adds proof that the right person is physically present when the punch happens. They differ in cost, privacy and how much they slow the line.

MethodHow it proves presenceHow well it stops buddy punchingCost and setupTrade-offs
Supervisor-scanned badgeA supervisor sees each person as their badge is scannedStrong, when a supervisor is there at the start and endLow: printed badges and a phoneNeeds a lead present at clock-in and clock-out
Biometric clockA fingerprint, face or hand scan matches the employeeStrongA device per entranceConsent and retention laws in several states; gloves and dirty hands cause failures
Photo captureThe kiosk or app takes a photo with each punchGood, if someone reviews the photosOften included in kiosk appsOnly deters if checked; face matching can count as biometrics
GPS or geofenceThe employee's phone must be inside a boundaryPartial: proves a phone is there, not who holds itNeeds every employee's smartphonePhones can be handed over and locations spoofed; privacy concerns
PIN or passwordThe employee types a secret codeWeak: PINs get sharedFreeStops mistakes more than cheating
Written policy aloneRules and consequencesDeterrent onlyFreeNothing enforces it

Combinations work well: a PIN plus photo capture at a kiosk, or GPS plus a selfie for solo field workers. Before buying a fingerprint or face clock, read biometric time clock laws; Illinois alone has produced years of class actions over missing consent forms.

A sample buddy punching policy

A good policy says what counts, calls it falsifying time records, names the consequences for both people involved, and promises pay for all time actually worked. Adapt this wording for your handbook:

  • Your own time only. Only you may record your own time. Clocking in or out for another employee, or asking someone to do it for you, is falsifying time records.
  • Missed punches. If you forget to clock in or out, tell your supervisor the same day so the record can be corrected. Every correction is logged.
  • Consequences. The employee who records time for someone else and the employee whose time was recorded are both subject to discipline, up to and including termination.
  • Pay for all work. You will be paid for all time you actually work. Tell your supervisor about any work time that wasn't recorded.

The last line matters. Under the Fair Labor Standards Act you must pay for all hours worked, so the policy is about accurate records, not just catching people. Have each employee sign it, and apply it the same way to everyone.

Is buddy punching illegal?

Usually buddy punching is a serious policy violation rather than a crime in itself, but it can become one. Being paid for hours you didn't work means taking wages you didn't earn, and in serious or repeated cases employers have reported it as theft or fraud. Whether charges are possible depends on the state, the amount and the facts.

For employers, no federal law requires a particular way to prevent buddy punching. What the FLSA does require is an accurate record of the hours each employee works each workday and each workweek (29 CFR 516.2(a)(7)). A clock that's easy to fool makes those records harder to defend.

Can you be fired for buddy punching?

Yes, in most cases. Most US jobs are at-will, and falsifying time records is a common reason for termination, for both the person who punched and the person who benefited. Where a union contract requires just cause, falsified time records are commonly treated as just cause. Depending on the state, a firing for it may also affect unemployment benefits.

A step-by-step plan to stop buddy punching

Put the pieces together in this order. A small crew can get through the first four steps in a week.

  1. Measure first. Compare a week of punches with who the supervisor actually saw at the start and end of each shift.
  2. Pick a check that fits how your crew starts work. A supervisor scan for crews that start together, photo capture or biometrics at an unattended door, GPS for solo workers.
  3. Retire shared credentials. Stop shared PINs, shared logins and open paper sign-in sheets.
  4. Publish the policy. Hand out the written policy, explain it, and collect signatures.
  5. Review exceptions every week. Look at edits, missed punches, automatic clock-outs and punches from unexpected places before approving timesheets.
  6. Apply it consistently. Give the same consequence for the same conduct, every time.

How a supervisor-scanned badge clock handles it

With a badge time clock like TrackBadges, every employee carries a printed QR badge and a supervisor scans it with their phone, so the person clocking someone in has seen them standing there. A coworker can't scan a friend in from the parking lot, because they don't hold the scanner. Every punch also records which scanner made it, where, and optionally a GPS stamp, and a lost badge can be reissued so the old one stops working. The trade-off is that someone has to be there to scan: it fits crews that start together, not solo workers spread across town.

Frequently asked questions

What is buddy punching?

Buddy punching is when one employee clocks in or out for a coworker who isn't actually working, usually to cover a late arrival or an early exit. It's a form of time theft and works on punch cards, PINs, app logins, badges and paper sign-in sheets.

Is it illegal to clock in for someone else?

Clocking in a coworker who isn't working is usually a serious policy violation that can get both people fired, and in serious cases it can be treated as theft or fraud, depending on the state and the amount. Entering time for someone who is actually working, like a supervisor scanning a crew in, is legal as long as the record is accurate.

Can you be fired for buddy punching?

Yes. Most US employment is at-will, and falsifying time records is a common reason for termination, both for the person who punched and the person who benefited. Depending on the state, it may also affect unemployment benefits.

Do QR code time clocks stop buddy punching?

Only if someone checks who is being scanned. A QR badge at an unattended kiosk can be scanned by a friend, just like a punch card. When a supervisor scans each badge, they see each person, which stops buddy punching without collecting biometrics.

Are biometric time clocks the best way to stop buddy punching?

They're effective, but they come with legal requirements. Illinois's BIPA, for example, requires written notice, a signed release and a public retention policy before collecting fingerprints or face scans, and other states have their own rules. A supervisor-scanned badge or photo capture stops most buddy punching without biometrics.

How do you prove buddy punching?

Look for patterns: punches seconds apart on one device, people on the clock who can't be found, or punches from places they weren't. Compare punches with supervisor observations, gate logs or camera footage, and document what you find before taking action.

Keep reading

Clock your crew in with one phone.

Print a QR badge for everyone and scan them in and out with any phone or tablet. Free for up to 3 people — try it with your real crew before you sign up.