What is time theft? Types, laws and how to stop it

Time theft is what happens when an employee is paid for time they did not work, whether by clocking in for a friend, stretching a break or writing down hours from memory. The word "theft" makes it sound rare and dramatic. In most small businesses it is quieter than that: a few minutes here, a favor to a coworker there, a timesheet nobody checks. This guide covers what employee time theft looks like, what it costs, what the law lets you do about it, and how to build a time-recording process that makes it hard to do and easy to spot.

What is time theft?

Time theft means collecting wages for time that was not actually worked. The cost is simple: hours paid for work not done. It can be deliberate (one person punching in for another) or a slow habit (leaving ten minutes early every Friday and clocking out at the normal time). It is different from an honest mistake, like forgetting to punch out, and that difference matters when you decide how to respond.

It is also different from the opposite problem. Employees who work off the clock because a manager asked, allowed or knew about it are owed pay for that time. The Department of Labor's rule at 29 CFR 785.11 says work not requested but "suffered or permitted" is work time. So a good time-recording system protects both sides: the employer from paying for hours not worked, and the employee from going unpaid for hours they did work.

Seven types of employee time theft

These are the examples of time theft that come up most often in hourly workplaces such as cafes, retail stores, clinics, warehouses and job sites.

Buddy punching

Buddy punching is the best known form. A paper card in a rack, a shared login or a PIN everyone knows lets one employee punch for another. It only works if the system cannot tell who is standing at the clock. The fix is not suspicion; it is a system where each punch belongs to one person.

Padding, long breaks and rounding

Padding and long breaks are small amounts repeated daily. Rounding deserves its own caution because it cuts both ways. Under 29 CFR 785.48, rounding to the nearest 5 minutes, tenth or quarter hour is accepted only if it is used so that it does not, over time, result in failure to pay employees for all the time they actually worked. A rule that always rounds in the employer's favor is a wage problem, not a time theft fix. Our guide to the 7-minute rule shows how neutral rounding works.

Falsified timesheets, personal time and ghost shifts

Falsified timesheets are most common where hours are written by hand at the end of the week. Personal time on the clock is the hardest to prove and the easiest to overreact to: a short personal phone call is not theft, and most employers tolerate it. Ghost shifts are rare but costly: hours recorded for someone who did not work, often through a manager editing punches. That is why edits need an approver and a history, not just a button.

What time theft costs, with the arithmetic

We are not going to quote a national "billions lost" figure, because it would not help you run your cafe or warehouse. Do the arithmetic for your own team. The cost is hours paid for work not done, multiplied by the wage.

Take one illustrative example. A Northfield Coffee kitchen employee earns $18.00 an hour and pads each shift by 10 minutes, five days a week, every week of the year:

• 10 minutes × 5 days = 50 minutes a week
• 50 minutes × 52 weeks = 2,600 minutes, which is 43.33 hours
• 43.33 hours × $18.00 = $780.00 a year for one person

If five people in an eight-person crew did the same thing, the figure would be $3,900.00 a year before payroll taxes, and overtime could make it higher whenever the padded minutes pushed a week past 40 hours. These numbers are illustrative, not an average. They show why a small habit is worth a clear policy, and why it is also worth being careful not to accuse someone over ten minutes you cannot prove.

There is a second cost that never appears on the timesheet: honest employees who watch a coworker get away with it. A consistent process, applied to everyone, protects morale as much as payroll.

What the law lets you do

This section covers federal rules and general principles. State law varies, and this is general information, not legal advice.

You must pay for all hours actually worked

Under the Fair Labor Standards Act, employers must pay for all hours worked. The Department of Labor's Fact Sheet 21 on recordkeeping says employers must record hours worked each day and each workweek, may use any timekeeping method they choose as long as it is complete and accurate, and must keep payroll records at least 3 years and time cards at least 2 years. So if an employee did work and forgot to punch, the time is owed even though the punch is missing. If an employee did not work, you do not owe it and can correct the record.

Discipline and termination are the remedy, not wage penalties

The appropriate response to proven time theft is documented discipline, up to termination under your policy and your state's rules. Do not respond by docking an extra hour as a penalty or fining an employee. Wages must be paid "free and clear" under 29 CFR 531.35, which means an employee cannot be required to hand back part of a wage for the employer's benefit. The Department of Labor's Fact Sheet 16 on wage deductions gives a classic example: a minimum wage cashier cannot be required to reimburse a cash drawer shortage, even where the loss came from the employee's negligence, because it cuts into the minimum wage. The same logic applies to overtime pay.

State deduction rules are often stricter

Federal law sets a floor. Many states restrict what an employer can deduct, and some effectively prohibit disciplinary fines and shortage deductions. New York Labor Law section 193, for example, bars any deduction from wages except categories it lists, such as those required by law, authorized in writing for the employee's benefit, recovery of overpayments caused by math or clerical errors, and repayment of advances. Fines and shortages are not on that list. Recovering an overpayment, such as pay for hours that were punched but not worked, is a separate and delicate question that state law answers. Talk to your state labor department or an employment attorney before you change a paycheck.

Biometric laws are a reason to think twice

Fingerprint or face-scan clocks make buddy punching harder, but they carry legal weight. Illinois regulates them under its Biometric Information Privacy Act, requiring written notice and a written release, and Texas and Washington have their own biometric laws. If you operate in more than one state, a PIN-based or phone-based approach avoids that whole area. Workzenly does not use biometrics; the kiosk uses each person's own PIN.

How to prevent time theft

Prevention works best when it looks like ordinary management, not surveillance. These controls handle most of the problem.

1. Write the rule down. A one-page policy that says what counts as a violation, and that every employee signs, turns a vague expectation into a clear one. A copyable clause follows below, and our attendance policy templates cover lateness and absences.
2. Use a geofenced mobile clock-in. With GPS and geofencing on, each clock-in carries a location and an inside or outside result, so a punch from the bus stop shows up for review. Read what a geofence is and how GPS time tracking records location only at the punch.
3. Put a PIN kiosk at the door. Where phones stay in lockers, a tablet with each person's own PIN ties a punch to one employee. The time clock kiosk works alongside phone punches in the same timesheet. Put the tablet where a manager can see it.
4. Require approval for edits, and keep the history. A manager should approve every correction, and the original punch should stay next to the fix. Ghost shifts and quiet edits do not survive that.
5. Record breaks as they happen. Have employees tap start and end break instead of assuming a fixed deduction, so a 50-minute lunch is a 50-minute lunch on the record. Check your state's meal and rest rules in our lunch break laws by state guide.
6. Review timesheets weekly. Approve timesheets every week, not at the end of the pay period, while people still remember what happened. Look at exceptions first: late starts, missed clock-outs, punches outside a geofence, edited punches and overtime.
7. Use neutral rounding or none. Pay to the minute where you can. If you round, round neutrally.
8. Make it easy to be honest. If a forgotten punch takes a phone call to the owner, people will guess. If they can send a correction with a note from the app, they will use it. Our free timesheet templates help if you are still on paper.

A time and attendance policy clause to copy

Adapt this to your handbook, replace the bracketed items and have an employment attorney review it. It is written to be fair to employees: it says all time worked is paid, which keeps you on the right side of the FLSA.

How to investigate fairly

A suspicion is not proof. If you think someone is padding time, work through it in order.

1. Pull the facts, not the story. Export the punch history, the schedule and any edit log for a defined period, such as the last six weeks. Look for a pattern, not a single odd day.
2. Check for an innocent explanation. Was the employee asked to stay late, covering for someone, or working off-site? A missed punch is not theft. Remember that if they did work, they are owed the pay.
3. Compare with independent evidence. Use the schedule, sales or task records and what other managers saw. Do not rely on a hunch or one coworker's comment.
4. Talk to the employee. Show them the records and ask for their account. Take notes, and have a second person in the room where your policy allows.
5. Decide consistently. Apply the same outcome you would apply to anyone else in the same situation. Document the policy, the facts, the conversation and the action.
6. Correct the record lawfully. Fix the timesheet for hours that were not worked, but do not use the pay as a fine. Check your state's rules on recovering overpayments before touching a paycheck.
7. Keep the file. Store the evidence and the outcome with your other personnel records, and review whether the process that allowed the problem needs fixing.

Be careful with surveillance beyond the punch. Reading private messages, tracking an employee's phone outside work or recording without notice can create legal problems of its own. A location check at clock-in and clock-out, with notice, is a far narrower tool.

Frequently asked questions