Buddy punching is when one employee clocks in or out for another who is not there. It is a form of time theft, and it happens wherever clocking in is a single action that anyone can perform: a punch card, a shared PIN or a login passed to a colleague. The fix is to tie time records to the person and to their actual work. Heavier surveillance is not needed.
Key takeaways
- It needs two people and a clock that cannot tell them apart.
- Paper sheets, punch cards and shared PINs are the easiest to abuse.
- Biometric clocks stop it and bring privacy law with them.
- For computer work, time taken from the person's own activity leaves nothing to punch.
What does buddy punching look like?
Covering a late start
A colleague clocks someone in at 9:00. They arrive at 9:25.
Covering an early exit
Someone leaves at 4:00 and a colleague clocks them out at 5:00.
Covering an absence
A whole shift is punched for a person who never came in.
Sharing a login
On a remote team, one person starts a colleague's web timer.
It is usually a favor between friends, not a scheme. That matters for how you respond.
Is buddy punching illegal?
It is falsifying a time record, which breaks almost every employer's policy and can amount to fraud. Both people are involved: the one who was absent and the one who punched.
Two cautions for employers, and this is not legal advice.
- You still owe pay for hours actually worked. You can correct the record to what really happened. Check wage rules before you deduct anything beyond that.
- You are responsible for accurate records. US employers must keep complete and accurate records of hours worked. A clock you know to be unreliable is your problem too.
More on the wider issue is in time theft at work.
Which time clocks allow it?
| Method | How easy is buddy punching? | Why |
|---|---|---|
| Paper sign-in sheet | Very easy | Anyone can write a name and a time |
| Punch card or badge | Easy | The card works for whoever holds it |
| Shared PIN at a kiosk | Easy | A PIN can be told to a friend |
| Personal login on a web clock | Possible | Passwords get shared |
| Mobile clock with location | Hard | The phone has to be at the place |
| Biometric terminal | Very hard | It checks the person, not a token |
| Automatic tracking from computer activity | Very hard | Time comes from the person's own working session |
How do you prevent buddy punching?
Give every person their own credentials
No shared PINs, no shared logins, no cards left in a rack.
Write it into the policy
Say that clocking in for someone else is falsifying a record, and what follows.
Tie time to the work
Compare the time record with evidence of work: activity, output, access logs.
Look for patterns
Two people who always punch in the same minute. Punches with no activity after them.
Make corrections easy
People cover for each other when a late arrival costs too much. Let them fix an honest mistake.
Respond in proportion
Talk first. Keep formal action for repeat or deliberate cases.
What are the warning signs?
Patterns worth a second look
- Two people whose punches match to the minute, day after day
- A clock-in followed by a long stretch with no sign of work
- Perfect attendance on paper and late work in practice
- Punches from a location or device the person does not normally use
- A manager who never sees someone who is always on time
One match is coincidence. A pattern over weeks is worth a conversation.
Are biometric time clocks the answer?
They stop buddy punching. They also collect fingerprints or face scans, and that brings legal duties.
In Illinois, the Biometric Information Privacy Act requires written notice and a written release before a company collects identifiers such as fingerprints or scans of face geometry. Other states and countries have rules of their own. Take legal advice before you install a biometric terminal, and ask whether a lighter method would do.
Do
- Fix the clock before you blame the people
- Use the lightest method that ties time to the person
- Tell staff what the system records
- Treat a first case as a conversation
Do not
- Install fingerprint scanners without legal advice
- Punish lateness so hard that covering becomes rational
- Rely on a paper sheet for payroll
- Dock pay for hours that were actually worked
Why does buddy punching happen?
Mostly because the cost of being five minutes late is higher than the risk of asking a friend. Rigid penalties for lateness, pay docked in large blocks and managers who count punches create the incentive.
A grace period, the ability to make up time and a straight conversation about lateness remove most of it.
How does BirdsEye prevent buddy punching?
For people who work at a computer, BirdsEye removes the punch. There is no clock-in action to hand to a friend.
- Time comes from the person's own session. The desktop agent records working time on that person's computer, under their own account.
- Attendance comes from the same data. Each day is marked present, absent, late, on leave, on holiday or weekend. Late detection uses a grace period you set.
- Not-started alerts. Managers get a push notification on the Android app when someone has not begun work past the grace period.
- Corrections are recorded. A manual change to a day's status carries a note explaining why.
BirdsEye is built for computer-based work. It has no kiosk, badge reader or GPS clock for on-site and field staff. See attendance and alerts.
- MRMegan R.Started 09:00
- TBTom B.Late, 09:41
- OHOwen H.Alert sent
Frequently asked questions
What is buddy punching?
It is when one employee clocks in or out on behalf of another who is not present, so that the absent person is paid for time they did not work.
Can you fire someone for buddy punching?
Falsifying time records is a serious policy breach in most workplaces. What you can do depends on your policy, the contract and local law. Apply the same response to both people involved and take advice for anything beyond a warning.
How common is buddy punching?
There is no reliable public figure. The numbers quoted most often trace back to surveys by time clock vendors, so we do not repeat them.
Does automatic time tracking stop buddy punching?
For computer work, yes in practice. Time is recorded from each person's own working session, so there is no shared action to perform for someone else.