Buddy punching: What it is and how to prevent it

At 7:25 a.m., a worker scheduled for 7 a.m. walks onto the jobsite. Their time card, however, shows they showed up at 6:58 because a coworker punched them in. The late worker still pockets pay for those extra 27 minutes, often without the employer ever noticing. This scenario is a classic example of buddy punching. Beyond the immediate hit to payroll, time theft distorts labor data and inflates bidding costs over time.

This guide breaks down why construction jobsites are vulnerable to time card fraud, what buddy punching costs businesses, and what steps contractors can take to stop it.

What is buddy punching?

At its simplest, buddy punching happens when one employee clocks in or out on behalf of another. While it exists in every sector, construction contractors face elevated risks due to the operational setup of most jobsites:

• Dispersed crews: Foremen manage multiple areas or sites simultaneously, making it easy for a late arrival to slip by unnoticed during morning check-ins.
• Foreman-entered crew time: When busy supervisors fill out time cards for an entire crew at the end of shift, they often rely on memory or best estimates rather than exact timestamps.
• Shared kiosks and PINs: Simple badge scanners, single tablets, or easily shared PINs allow workers to punch in for absent teammates in seconds.

Common examples of buddy punching

Buddy punching rarely starts as a deliberate scheme. More often, it begins as a casual favor between coworkers that evolves into a daily habit. Here are some of the most common examples on a jobsite:

• Late arrival: A worker running late texts a colleague to punch them in at 7 a.m. On the time sheet, the timestamp matches everyone else’s, masking the late arrival.
• Early exit: An employee leaves the jobsite 30 minutes early to handle a personal errand, and a friend punches them out at quitting time so their pay isn’t docked.
• Extended lunch: A worker takes a 90-minute lunch break, but an on-site coworker punches them back in after 30 minutes to make the break appear normal.
• Ghost shift: An absent worker misses an entire shift, relying on a trusted coworker to handle both their morning clock-in and afternoon clock-out so they don’t lose income.
• Shared credentials: Two workers exchange PINs or badges so they can routinely punch each other in depending on who arrives on-site first to avoid losing out on pay.

If a four-man drywall crew logs 40 hours of work on a framing cost code when 15 of those hours were fraudulent, the project tracking data will show framing took 160 man-hours instead of 145.

Buddy punching costs contractors through profit margins, future estimates, and legal compliance.

Phantom wages and inflated overtime

A few extra minutes here and there quickly compounds across large crews and long seasons. Say 20 employees make $40 an hour. If the whole crew steals 15 minutes a day, that drains $1,000 a week ($52,000 annually). Because the padded minutes look like normal punches, payroll rarely flags them, and in weeks your crew is already at 40 hours, those extra minutes get paid at time and a half.

Skewed job costing and inaccurate bids

Phantom hours still get charged to specific cost codes, artificially lowering productivity metrics, shrinking project profit margins, and corrupting historical labor data. If a four-man drywall crew logs 40 hours of work on a framing cost code when 15 of those hours were fraudulent, the project tracking data will show framing took 160 man-hours instead of 145. Using that inflated 160-hour baseline leads to an overpriced bid that may lose out to a competitor.

Compliance and legal exposure

Employers are legally accountable for maintaining accurate time records. When phantom hours slip into certified payroll reports on prevailing wage jobs or trigger mandatory overtime in strict labor markets, contractors face potential compliance violations and audit penalties. On federally funded public works projects, the weekly certified payroll reports is a signed statement that the hours and wages reported are correct. Buddy punching makes that statement false, and the false statement is the exposure. 29 CFR 5.5(a)(3)(ii) requires that weekly statement of compliance and warns that falsifying it carries liability under 18 USC 1001 and 31 USC 3729. Under 29 CFR 5.12, disregard of Davis-Bacon obligations can also bring debarment for up to three years.

How to spot buddy punching in time records

These patterns don’t automatically prove time theft, but they signal a need for further investigation:

• Identical crew timestamps: Look for multiple workers logging clock-in times within seconds of each other, which can indicate a single person punching in for the group.
• Multiple punches from a single device: Watch for multiple employee clock-ins originating from the same IP address or mobile device ID. This can also indicate a single person clocking in for their coworkers.
• Clock-ins outside the jobsite: Catch timestamps generated from outside the geofence. While a worker could have clocked in during a yard or supply house stop, they may also be clocking in ahead of arrival.
• Copy-paste schedules: Notice when records consistently show uniform, exact shifts, like 7 a.m. to 3:30 p.m. on the dot every day. This often happens when employees or managers use software features to duplicate previous time cards or batch-apply default schedules rather than logging actual punch times.
• Off-schedule entries: Inspect clock-ins recorded outside of work hours or on non-work days. While these can be genuine corrections, they may also signal attempts to pad hours.

Legitimate patterns like an off-site material run or a shared site tablet can produce the exact same data patterns as above. To preserve crew trust, always cross-reference flagged punches against the foreman’s daily site report and schedule before taking action.

How do businesses eliminate buddy punching?

Elimination starts by removing opportunities for time theft and replacing outdated tracking methods with modern controls. Here are some of the most effective ways to prevent buddy punching.

Fix the conditions that make buddy punching feel necessary

Sometimes, buddy punching incidents are a symptom of unrealistic site policies rather than deliberate dishonesty. Adjusting problematic rules can eliminate the urge to cheat the system. Create a five-minute cushion for morning clock-ins if site bottlenecks like security gates or single entry points delay workers who arrived on time. Or if the only place to punch in is on a tablet in a trailer a quarter-mile from where the work happens, give employees a way to track time on their personal devices to save travel time.

Give each employee their own way to clock in

Replace shared kiosks, communal paper sheets, and gang-box PIN cards with individual mobile access. Require workers to log in through a personal or company-issued smartphone app so every timestamp links to a unique user. Remove shared PINs and physical badges that workers easily trade or leave behind on the jobsite.

Implement GPS geofencing

Geofencing uses GPS tracking to verify whether workers punch in at the jobsite or somewhere else. Create virtual jobsite perimeters so the system automatically flags or blocks clock-ins attempted off-site. Configure larger boundaries for expansive jobsites, account for multisite travel during shifts, and establish offline modes for workers in basements or steel structures where cell signal drops.

Require photo capture or facial recognition

Add a layer of visual verification to ensure the person clocking in matches the employee on the time card. Capture a quick photo at the moment of clock-in for managers to review during standard payroll processing. Use facial recognition software to match punches against enrolled worker profiles automatically, flagging mismatches instantly. Communicate openly with your crew about how biometric data is stored and used to protect privacy and maintain trust. Some states require more. For example, Illinois BIPA requires a written, publicly available retention and destruction policy, written notice of what is being collected and why, and a signed release from each worker before the first scan.

Put an end to buddy punching with Miter

Buddy punching is a perennial problem that costs contractors money and undermines accurate job costing, distorting future bids in turn. While several industries face this risk, construction companies are especially vulnerable because shared devices and PIN-based punch-in clock setups make it easy for workers to clock in for one another.

Modern software helps construction employers catch buddy punching sooner. Miter Time Tracking offers flexible tools that suit any management style and workforce. Field crews can log hours directly through individual mobile apps or on-site kiosk tablets. Facial recognition confirms who is clocking in, and geofencing confirms where.

These safeguards help contractors not only avoid paying phantom wages to people who didn’t actually put in the work, but also maintain more accurate data. With Miter, that accurate data also flows directly into payroll and ERP software, keeping labor costs and future bids tied to real hours worked, not padded time cards.

Frequently asked questions

Is buddy punching illegal?

Buddy punching constitutes time theft and payroll fraud, carrying legal consequences for both employees and employers:

• For employees: While prosecutors rarely pursue criminal charges for minor infractions, large-scale schemes could lead to fraud or grand theft charges for the workers involved. 
• For employers: Although the Fair Labor Standards Act (FLSA) doesn’t mention buddy punching by name, the legislation requires employers to maintain accurate records of worked hours. Failing to catch buddy punching leaves contractors fully liable for inaccurate payroll reports and FLSA compliance violations. 

When contractors catch a buddy punching incident, they should immediately correct their payroll records and document the reason for the adjustment. Recovering an overpayment through a payroll deduction remains difficult, however, since many states require written authorization from the employee and others cap the amount or set a deadline.Prevention usually beats recovery.

Can I fire someone for buddy punching?

In most cases, the answer is yes. Many contractors treat buddy punching as dishonest conduct and grounds for immediate termination. To protect against wrongful termination claims, contractors must maintain a written policy on time theft, document evidence, and enforce their rules consistently across all employees. Employment laws vary by jurisdiction. Consult legal counsel to confirm state-specific termination and payroll rules.