Buddy punching is when one employee clocks in or out for someone else. Usually it's small. A friend's running ten minutes late, so a co-worker punches their card. Nobody thinks of it as stealing, and that's why it keeps happening.
The cost builds up quietly. Ten minutes a day at $18 an hour is about $3. Across a team of 20 people, five days a week, it could come to thousands of dollars a year, even if only some of them do it. It also isn't fair to the people who show up on time and see it happening.
Why paper and shared PINs make it easy
Most buddy punching comes down to opportunity. It's easiest in these setups:
- Paper cards or a punch clock. Anybody can punch any card.
- A shared login, or PINs that everybody knows. Some managers hand out PINs like "last four digits of your phone number," which are easy to guess.
- A time clock nobody can see. If it's in a back hall with no manager or camera nearby, nobody's watching.
- Hours filled in afterward. A sheet people complete at the end of the week is memory at best.
Technical fixes, from light to heavy
You don't need to jump to the strongest option. Pick the lightest one that solves your problem.
Personal PINs on a visible kiosk
A tablet by the door, where each person has their own PIN. It's cheap and simple. Mount it where a manager walks by, and explain that a PIN is like a signature. It won't stop someone who hands over their PIN, but it stops the casual version, and it leaves a record.
Phone clock-in with location checks
Each person clocks in from their own phone, and you check that they're at work. You draw a circle around your location on a map, then choose to record where people are or to require them to be inside the circle.
People rarely hand their personal phone to a friend, so this one works well. It costs little, and there's no hardware to buy. It does ask people to use their own phones, so give them another option, like a kiosk, if someone objects.
Automatic clock-in
The phone notices when someone arrives and clocks them in. With no button to press, there's nothing to press for someone else. It needs each person's agreement and location access. Here's how ours works.
Biometrics
Face or fingerprint scans are the strongest option and the most sensitive. Illinois, Texas and Washington have biometric privacy laws, and Illinois in particular has produced costly lawsuits. If you go this way, talk to a lawyer first. For most small businesses, it's more than you need.
Your rules matter as much as your tools
A good clock won't help if nobody knows the rule. Put these in writing:
- Everyone clocks in for themselves. Doing it for someone else is treated the same as falsifying a record, for both people.
- When the clock starts. "When you're ready to work," or "when you walk in," but pick one.
- What to do if you forget. Tell a manager the same day. Honest mistakes get fixed, with no trouble.
- What to do if you're running late. Call or message your manager. Being late is a smaller problem than a false punch.
Have everyone read and sign it. In PinkLinq, you can send it as a Read and sign document, and you'll see who's done it.
What to look for in your data
You can spot the pattern without accusing anyone:
- Two people who always clock in within a minute of each other, on the same device
- Someone who clocks in on time but shows up later on camera or in the first task of the day
- Punches from outside your location, if you record location
- Someone whose hours regularly don't match what their manager remembers
None of those prove anything. Treat them as reasons to look closer.
How to handle it when it happens
Talk to the people involved privately, and start with a question: "Your punch shows 9:00, but I didn't see you until 9:20. What happened?" Sometimes there's a reason. If there isn't, follow your written policy for both people.
Be careful with pay. You can correct the timesheet to reflect hours actually worked, but you must pay for all the time someone really worked, even if they broke your rule. Many states also limit what can be deducted from a paycheck. If you're unsure, ask first.
Fair, calm and consistent handling works better than a big speech. If you make one example of a person you don't like and ignore a person you do, your team will notice.
Look at the reason, too
If people are often late, ask why. Maybe the bus schedule changed, or your 7 a.m. start doesn't work for parents dropping kids at school. A 15-minute shift change might solve a problem that no time clock can.
Good scheduling also helps. When people can swap shifts themselves and see their schedule ahead of time, fewer are stuck running late or making excuses.
What we do in PinkLinq
You can set the rule for each person. Someone can clock in anywhere, only at their own store or only on the kiosk. Location can be off, recorded or required. Punches are saved with their time and place, and any change on a timesheet needs a reason and is logged. You can get started free for up to 10 people.
This is general information, not legal advice. Pay and privacy rules vary by state.