Buddy punching happens when one employee clocks in or out for another. It usually looks harmless: a coworker running late texts a friend, “Can you punch me in?” But every one of those favors means you pay for time nobody worked, and over months the cost adds up quietly in your payroll.
This article explains why buddy punching happens, how to estimate what it might be costing you, and the specific tools and policies that make it hard to do.
What buddy punching looks like
Buddy punching is a form of time theft where someone records hours on behalf of a coworker who isn’t actually there. Common versions include:
- Punching a late coworker in at the scheduled start time.
- Clocking out for someone who left early.
- Sharing a PIN or login so a friend can punch from a shared terminal.
- Handing over a punch card or badge.
- Writing in hours for someone on a paper sign-in sheet.
It’s most common where the clock-in method only proves that someone entered the right code, not that the right person was present at the right place.
Why it happens
Most buddy punching isn’t organized fraud. It grows out of ordinary pressures and weak systems:
- Strict lateness penalties with no flexibility. If being five minutes late triggers a write-up, employees cover for each other.
- Shared credentials. Four-digit PINs are easy to share and easy to watch someone type.
- No one reviews the data. If nobody ever compares punches to schedules, people learn that nobody will notice.
- Team loyalty. Saying no to a coworker feels worse than bending a rule that seems abstract.
- Unclear policy. Some employees don’t realize that punching for someone else is a serious violation.
Understanding the cause shapes the fix. Technology closes the gap, but a fair attendance policy removes much of the motive.
Estimating the cost: a worked example
You don’t need industry statistics to judge whether buddy punching matters to your business. You can run the numbers yourself. The following is a hypothetical example to show the method; plug in your own figures.
Assume a business with 15 hourly employees earning an average of $17 per hour. Suppose that across the whole team, buddy punching adds an average of 10 unworked minutes per employee per week.
| Step | Calculation | Result |
|---|---|---|
| Unworked hours per employee per week | 10 minutes ÷ 60 | 0.167 hours |
| Cost per employee per week | 0.167 × $17 | $2.83 |
| Cost for the team per week | $2.83 × 15 | $42.50 |
| Cost per year (52 weeks) | $42.50 × 52 | $2,210 |
That figure is wages only. Employer payroll taxes push it higher, and if padded time pushes someone over 40 hours in a workweek, those minutes are paid at time and a half. Our overtime calculator shows how quickly a few extra minutes change a weekly total.
Your real number could be smaller or larger. The point of the exercise is to compare the possible loss with the cost of a better system.
Prevention methods that work
The most effective approach combines a clock-in method that ties the punch to a person and a place with a routine of reviewing the data. Here are the main options.
1. NFC tags at the work location
An NFC tag is a small sticker or card mounted at the entrance or work area. Employees tap it with their own phone to clock in. Because the punch comes from the employee’s own device and requires being physically next to the tag, a coworker can’t punch someone in from home, and it’s awkward to carry a colleague’s phone around. NFC is a strong fit for fixed locations like stores, kitchens, warehouses, and client sites. See how an NFC time clock works.
2. GPS location on mobile punches
When employees clock in from a mobile app, recording GPS location with each punch lets managers see where it happened. Setting approved clock-in locations makes it easy to spot punches made far from the job. GPS is especially useful for field employees who never visit a central building.
3. Shared kiosk with individual PINs and photo capture
A tablet at the entrance works well for teams without company phones. To reduce sharing, give every employee a unique PIN, ban writing PINs down, and place the kiosk where a manager or camera can see it. Some kiosk setups also take a photo at each punch, which makes impersonation obvious when you review the record. If you go this route, include photo capture in your written notice to employees.
4. A clear, written policy
Spell out the rules so nobody can claim they didn’t know:
- Each employee records only their own time.
- Sharing PINs, logins, badges, or phones for punching is prohibited.
- Punching for someone else is treated as falsifying records, for both people involved.
- Missed or wrong punches must be fixed through the official correction process.
Have employees sign the policy during onboarding. Pair it with a fair lateness rule: a reasonable grace process and a simple way to report running late remove the incentive to ask a friend for help.
5. Regular audits
Even the best clock is only as good as the review behind it. A weekly 15-minute check catches most issues:
- Compare punches to the published schedule and look for employees who always punch exactly on time.
- Look for two punches from the same device or kiosk seconds apart.
- Check mobile punches recorded away from the approved location.
- Review correction requests and look for repeated patterns.
- Spot-check the “who’s working now” view against who is actually on the floor.
NFC tags are one of the simplest location checks for fixed sites. Read how NFC tap-to-clock-in works for on-site teams to see whether it fits your workplace.
Comparing the methods
| Method | Stops remote punching | Stops shared codes | Best for |
|---|---|---|---|
| Paper sign-in sheet | No | No | Not recommended |
| Kiosk with PIN only | Yes | Partly | Single-site teams on a budget |
| Kiosk with PIN and photo | Yes | Mostly | Busy entrances with shared devices |
| Mobile app with GPS | Mostly | Yes | Field and multi-site teams |
| NFC tag tap | Yes | Yes | Fixed locations and client sites |
Handle suspected buddy punching fairly
If the data suggests a problem, avoid jumping to conclusions. Talk to the employees involved, show them the records, and listen. Sometimes there’s an innocent explanation, such as a kiosk glitch or a punch made for a coworker who was in fact already working. Document the conversation and apply your policy consistently.
Remember that you must still pay employees for all hours they actually worked. Fix suspected errors through a documented correction rather than quietly editing time. Under the federal Fair Labor Standards Act, employers must keep accurate records of hours worked by nonexempt employees. This article is general information, not legal advice.
How EZTime makes buddy punching harder
EZTime gives you several ways to tie a punch to a real person in a real place: NFC tag taps, GPS location on mobile punches with approved clock-in locations, and a shared tablet kiosk. Missed-punch corrections require manager approval and leave an audit trail, and a live view shows who is working right now. Learn more about EZTime’s time and attendance tools and how they fit with the timecard correction process.
Want to test it on your next pay period? Start your 14-day free trial, no credit card required, or see pricing.
Frequently asked questions
Is buddy punching illegal?
It is generally treated as falsifying time records, and most employers handle it as a serious policy violation that can lead to discipline or termination. Whether it rises to a legal matter depends on the facts and the state. This is general information, not legal advice.
What is the best way to stop buddy punching?
Use a clock-in method that ties the punch to the person and the place, such as an NFC tag tapped with the employee’s own phone or a mobile punch with GPS location, and review the data weekly against the schedule.
Do PIN codes prevent buddy punching?
Only partly. PINs stop casual mistakes, but they are easy to share. Combine PINs with photo capture, a visible kiosk location, and a clear no-sharing policy, or move to NFC or GPS punches.
How do I calculate what buddy punching costs my business?
Estimate the unworked minutes per employee per week, convert to hours, multiply by the average hourly wage and the number of employees, then multiply by 52. Add employer payroll taxes and any overtime impact for a fuller picture.
Should I discipline both employees involved?
Most policies treat both the person who punched and the person who benefited as responsible. Whatever you decide, write it into your policy and apply it consistently.