Guide
How to stop time theft and buddy-punching
Time theft rarely looks like theft. It looks like a colleague clocking in a friend who is running ten minutes late, a shift that started at 07:55 written up as 07:30, or a paper register filled in from memory on Friday afternoon. None of it feels criminal — and all of it comes straight off your bottom line.
What is buddy-punching?
Buddy-punching is when one employee clocks in or out on behalf of another who is not actually there. With a card, a PIN or a paper register it is trivial — you just hand over the card, share the PIN, or sign your friend's line. It is the single most common form of time theft, and because each instance is small it goes unnoticed for years while quietly padding the wage bill.
What it actually costs
Ten minutes a day, per person, across a 50-person team is over 40 paid hours a week that no one worked — before you count early clock-outs, extended breaks and outright no-shows marked present. On a tight margin, that is the difference between a good month and a bad one, and it is invisible on a register that was filled in by hand.
The usual fixes — and where they leak
- Paper registers. Cheap, and completely unverifiable — anyone can write anything, and often does.
- Cards or fobs. Better, until they are lent, lost or clocked by a colleague. The card proves the card was there, not the person.
- PIN codes. Same weakness — a PIN is shared in seconds and can be used by anyone who knows it.
- Fingerprint scanners. Genuinely tie the punch to a person, but struggle with wet, dusty or worn hands, and many are slow and unhygienic at a busy gate.
What actually ends it: face-recognition clock-in
The only way to stop buddy-punching for good is to tie every clock-in to the person, not a token they carry. Face recognition does exactly that: you cannot lend your face, and you cannot punch in for a colleague who is at home. An employee steps up to a tablet, is recognised in under a second, and is clocked in — with a timestamp no one edited by hand.
That is how ShiftLog works. Mount any tablet at the entrance, enrol each person's face once, and from then on attendance records itself — with timesheets, overtime and lateness calculated automatically, and no register to doctor. It runs on the tablet itself, so it keeps working through a dropped connection, and no photographs are ever stored — only a private template that clocks the right person in.