Buddy punching — one employee clocking in for another who’s late or absent — is the most common form of time theft. On an hourly team it can quietly add thousands to payroll a year. Here’s how to stop it.
1. Use Face ID, not shared PINs
A shared or guessable PIN is the root cause. Face verification confirms the actual person is present, so no one can punch in a friend.
2. Require GPS on mobile clock-ins
If staff clock in from phones, require location. A punch from across town is an instant red flag — and a deterrent.
3. Pin each tablet to its location
A shared kiosk locked to one store means punches can only happen on site, at the right place.
4. Flag exceptions automatically
Missed clock-outs, impossible hours, and odd patterns should surface on a dashboard so a manager can review them the same day.
5. Keep an audit trail
Every manual edit should be logged with who, when, and why. Visibility alone changes behavior. In ClockAll, admin-entered punches even show in bold so everyone knows they were added later.
How much of it a face check actually stops
Worth being precise, because vendors are not always. Matching a face is not the same thing as proving a live person is standing there, and the two get sold as one.
- Stops: a coworker punching for someone who is not there. The face on camera has to match the enrolled template, and the comparison runs on our server — a modified app cannot simply report a match it did not earn.
- Stops: shared PINs. The most common form of buddy punching is a PIN written on a whiteboard. A face check makes the PIN insufficient on its own.
- Does not stop: a determined person holding up a photo. The capture is quality-gated — one frontal face, eyes open, close enough — but that is presence, not anti-spoofing. Anyone claiming a phone camera defeats a printed photo outright is overselling.
This matters for how you deploy it. A face check plus a geofence plus an audit trail changes buddy punching from something casual into something somebody has to deliberately plan, in front of a camera, on a device tied to a location, leaving a record. That is usually enough. A system marketed as unbeatable is not.
Start with the honest version of the conversation
Buddy punching is rarely malice. It is a favour between friends who do not think of ten minutes as money, which is exactly why announcing surveillance goes badly and quietly turning it on goes worse. What works is saying what changed and why, before it changes:
- Tell people the clock now takes a photo-derived check at punch time, and that no photograph is stored — only a mathematical template
- Say what the location check does: confirms the punch happened at the site, and is not tracking anybody between shifts
- Say what happens to the data if they leave: it is deleted, and they can delete it themselves from the app at any time
- Put the exceptions list in front of supervisors weekly, so it is a routine rather than an accusation
Teams that hear it as “we are fixing the payroll process” cooperate. Teams that discover it as “we were being watched” do not, and the first missed clock-out becomes an argument instead of a correction.
The legal side, briefly
If you use face verification, biometric privacy law applies whatever your size. Illinois BIPA is the strict one — written consent before enrolment, a published retention schedule, and no selling the data — and Texas and Washington have their own versions. In practice that means consent recorded with a version and a timestamp, a deletion path the employee controls, and a hard retention cap rather than keeping templates forever. Offering a PIN alternative matters too: consent that costs somebody their job is not consent.
What buddy punching is really costing you
It’s easy to shrug off — a few minutes here, a covered clock-in there — but the arithmetic is unforgiving. Even a handful of padded minutes per employee per shift, spread across a team over a year, adds up to real money paid for hours nobody worked. The total usually surprises owners the first time they actually tally it. The fix is cheap by comparison: verified punches simply remove the opportunity, so you stop paying for time that was never on the clock.
Frequently asked questions
How much does buddy punching cost?
Studies estimate the average employee adds time through buddy punching and rounding; for a 20-person hourly team that can run into thousands a year.
What’s the single best fix?
Face verification at clock-in. It removes the ability to punch in for someone else entirely.