Time Card Fraud: What It Costs You and How to Stop It

Your team clocks in on time every day. At least, that's what the timesheet says. Time card fraud doesn't always look dramatic. Sometimes it's a server asking a coworker to clock in before they've arrived. Sometimes it's an employee rounding up their hours by 15 minutes every day. 

Either way, time theft at work adds up fast, and most owners don't realize how much it's costing them until they start looking closely at their records.

‍

{{banner-cta}}

‍

The bottom line on time card fraud

Time card fraud happens when employees intentionally manipulate their recorded work hours to get paid for time they didn't actually work. It's more common than most owners expect, and small businesses using manual timesheets are the most exposed.

• What it is: Employees recording inaccurate work hours — through buddy punching, timesheet padding, unauthorized overtime, or editing past time entries.
• What it costs: According to the American Payroll Association, businesses can lose up to 5% of gross payroll annually to time theft.
• Who's most at risk: Small businesses using paper timesheets, shared PIN systems, or honor-system clock-ins.
• How to stop it: Digital time clocks with GPS verification, photo check-in, and automated alerts close the gaps that manual systems leave wide open.

Paper timesheets and shared PINs make it easy for time card fraud to go unnoticed for months. Want to stop buddy punching before it starts with photo check-in and GPS verification? Try Homebase's free time clock app.

What is time card fraud?

Time card fraud is when an employee intentionally records inaccurate work hours in order to receive pay for time not actually worked. Also called timesheet fraud or time clock fraud, it's a form of time theft that ranges from small daily padding to organized schemes involving multiple team members.

Time card error vs. fraud: what's the difference?

The difference between a time card error and fraud comes down to intent. An error is accidental: it happens inconsistently, and an employee who makes one will usually acknowledge it when you point it out. Time card fraud is deliberate, follows a pattern, and is typically concealed. If you're seeing the same discrepancy week after week from the same person — especially if they're resistant when you ask about it — that's no longer an error.

Common types of time card fraud

Time card fraud shows up in several different forms. Some are organized; most are opportunistic. Here are the most common types your team might encounter.

• Buddy punching. One employee clocks in for a coworker who hasn't arrived yet — or isn't coming in at all. It's the most common form of employee time theft, and it's nearly invisible on a paper timesheet. Think of a restaurant server who asks the closing shift team member to punch them in 20 minutes before they actually walk through the door.
  
  
• Timesheet padding. Recording longer hours than actually worked — clocking in a few minutes early, staying on the clock after leaving, or inflating hours on a manual timesheet. Small amounts add up to large losses over weeks and months.
  
  
• Time card manipulation. Going back into time logs to change previously recorded hours after the fact. This type of time clock fraud is only possible when a system doesn't maintain an edit audit trail.
  
  
• Unauthorized overtime. Continuing to clock hours after a shift ends, or on days off, without manager approval — specifically to push earnings into overtime pay. A strong overtime tracking system catches this before it hits payroll.
  
  
• Extended or unreported breaks. Taking longer breaks than scheduled without clocking out, so those extra minutes register as paid work time. Easy to miss on paper; easy to catch with a digital time clock.
  
  
• Early departure or late arrival. Leaving before the recorded end time or arriving after the recorded start time — common in businesses where a manager isn't on site for every shift.
  
  
• Ghost employees. Fictitious workers created in the payroll system to receive paychecks. Less common in small businesses, but it happens when one person controls both scheduling and payroll without oversight.

What time card fraud really costs your business

The American Payroll Association estimates businesses can lose up to 5% of gross payroll annually to time theft. For a small business, that number is hard to absorb.

Let's look at what that means in practice. Imagine a business with 20 hourly employees each earning $15 per hour. If every employee pads their timesheet by just 15 minutes per day, five days a week, that's roughly $20,000 in lost payroll every year — paid for time nobody actually worked.

The financial exposure runs in both directions, too. The problem isn't only employees stealing time from employers — employers who fail to maintain accurate records expose themselves to a different kind of liability:

• Under the Fair Labor Standards Act, every covered employer is required to keep accurate records of hours worked and wages paid for non-exempt employees
• The DOL Wage and Hour Division recovered $259 million in back wages for approximately 177,000 workers in fiscal year 2025 — the highest recovery since 2019

If your records are inaccurate and a wage dispute arises, you may have no defense. That’s why accurate time records are so important, as they can protect your business from payroll fraud losses and from wage theft claims.

Is time card fraud illegal?

Short answer: it can be — and the consequences are serious enough that no small business owner should treat it as a minor HR issue.

There's no single federal law that specifically criminalizes "time theft" for private-sector employees, but falsifying time records can constitute fraud or theft under state criminal statutes. The time card fraud penalty in these cases depends on the dollar amount and jurisdiction — and in severe or organized cases, time card fraud punishment can include criminal charges.

For federal employees and government contractors, the bar is lower. Time and attendance fraud can be prosecuted under 18 U.S.C. Section 1001, the federal false statements statute, which carries penalties including fines and up to five years imprisonment. 

The Department of Defense Inspector General documented a case in which three employees pleaded guilty to defrauding the federal government of more than $35,000 each through falsely claimed overtime. In a separate federal case, a government contractor pleaded guilty to falsifying timesheets at two agencies and was ordered to pay $70,646 in restitution.

The private sector most commonly resolves time card fraud through termination — but that doesn't mean legal exposure is off the table.

Consequences for employees who commit time card fraud

• Immediate termination
• Permanent damage to professional reputation and references
• Potential time card fraud felony charges under state theft or fraud statutes (amount and jurisdiction-dependent)
• Federal prosecution risk for government employees and contractors

What employers risk when time card fraud goes unchecked

• Direct financial losses from paying for time not worked
• Exposure to DOL audits and back pay orders if recordkeeping is inaccurate
• FLSA recordkeeping violation penalties
• Wage theft claims from employees if your records can't substantiate what was actually paid and when
• If an employee commits time fraud and your records are also inaccurate, you may have no reliable defense in a wage dispute

The same accurate records that help you catch time card fraud also protect you if a team member ever disputes their pay.

How to spot time card fraud on your team

Most small business owners don't discover time card fraud through a dramatic confrontation — they notice something is off in the numbers. These are the patterns worth watching for.

• Clock-in times that are always exactly the same, to the minute, regardless of what's happening that day
• One employee consistently clocking in around the start of another employee's shift
• Hours recorded that don't align with the posted schedule
• Overtime spikes that don't correspond to a busier period or increased workload
• Time entries that are frequently edited or corrected
• An employee who becomes unusually resistant when you mention changing your timekeeping process
• Labor costs creeping up without any change in headcount or scheduled hours

In small businesses, these patterns often go unnoticed because managers are stretched thin and trust their team. That trust isn't misplaced — most employees are honest. But a time card fraud investigation is far more disruptive than prevention, and digital time tracking is designed to catch what busy people miss.

How to prevent time card fraud

Preventing time card fraud isn't complicated, but it does require replacing the systems that make it easy. Here are the steps that make the most difference.

1. Replace manual timesheets with digital time tracking. Paper timesheets and honor-system clock-ins are where time card fraud starts. Every type of fraud on the list above becomes harder — or impossible — when you switch to a digital system that records clock-ins automatically and timestamps every entry. The opportunity for manipulation shrinks significantly.

2. Add verification at the point of clock-in. GPS confirmation tells you an employee is actually at your location when they clock in. Photo check-in confirms it's the right person — making buddy punching nearly impossible to pull off without being caught. Early clock-in prevention settings block employees from punching in before their shift window opens, which eliminates unintentional padding before it starts. These three controls together close the most common fraud entry points.

3. Set up real-time manager alerts. You can't be everywhere at once. Automated notifications for late arrivals, early clock-outs, missed punches, and overtime approaching threshold give you oversight without requiring you to be on site for every shift. You find out about the problem when it happens — not at the end of the pay period.

4. Require manager approval for time card edits and overtime. No team member should be able to change a past time entry without manager sign-off, and overtime should require preapproval rather than showing up as a surprise on the timesheet. Systems that enforce this create a clear chain of accountability and a documented audit trail.

5. Audit time records regularly. A monthly review comparing scheduled hours to actual hours worked surfaces discrepancies before they compound.

6. Write a clear timekeeping policy. Your team should know exactly what's expected: when to clock in and out, how breaks are tracked, how overtime is approved, and what the consequences are for falsifying time records. Document it, include it in onboarding, and reference it annually. A written policy is your foundation if you ever need to take disciplinary action — without one, inconsistent enforcement creates legal risk.

7. Connect time tracking directly to payroll. When automated timesheets convert to payroll without manual re-entry, there's no gap in the process where hours can be inflated between systems.

Running on paper timesheets means every gap in your process is a gap in your payroll. Homebase gives you GPS verification, photo check-in, manager alerts, and automated timesheets that connect directly to payroll — so time card fraud doesn't have anywhere to hide.

What to do when you catch time card fraud

Finding time card fraud on your team is uncomfortable — especially in a small business where you know everyone personally. Here's how to handle it without making it worse.

1. Document the evidence. Before you say anything, pull the time records, schedules, and discrepancies from your time tracking system. Build your case from data, not memory or secondhand accounts. You need something objective to bring to the conversation.

2. Review your timekeeping policy. Confirm the employee was aware of the rules and the consequences. If you've never put a policy in writing, this is the moment to do it for everyone going forward.

3. Have a private, direct conversation. Meet with the employee one-on-one and lead with the data. "I'm looking at your time records and I'm seeing a pattern I want to understand" gives the employee a chance to respond before you decide on consequences. Keep it factual.

4. Apply consequences consistently. Whatever your policy says happens next, follow it — and follow it the same way for everyone. Inconsistent enforcement creates real legal risk, including potential discrimination claims if some employees are disciplined for time card fraud and others aren't.

5. Fix the system that allowed it. Every incident of time card fraud is a signal that something in your process needs to close. If buddy punching happened because employees share a PIN, switch to individual photo verification. If time card manipulation happened because edits didn't require approval, turn that requirement on.

Stop time card fraud with Homebase

Manual timesheets leave too many gaps — and time card fraud is what fills them. By the time most small business owners notice the pattern, months of losses have already hit their payroll.

Homebase's free time clock app closes those gaps with GPS verification, photo check-in, early clock-in controls, and overtime alerts that notify you before a problem reaches your payroll. Over 150,000 small businesses use Homebase to track hours accurately and protect their bottom line.

Get started with Homebase for free — no credit card required.

Time card fraud FAQs

What is considered time card fraud?

Time card fraud is any intentional manipulation of recorded work hours to receive pay for time not actually worked. Common examples include buddy punching (clocking in for a coworker), padding hours on a timesheet, recording unauthorized overtime, and editing past time entries. The key distinction from a time card error is intent: fraud is deliberate and repeated, not accidental.

What is the penalty for falsifying time cards?

The penalty for falsifying time cards depends on the situation and jurisdiction. Most employees face termination and lasting damage to their professional reputation. In severe or organized cases, criminal charges for theft or fraud may apply under state law. Federal employees can be prosecuted under 18 U.S.C. Section 1001, the federal false statements statute, which carries potential criminal penalties including fines and imprisonment.

Is time card fraud a felony?

Time card fraud can be classified as a felony under certain circumstances. For federal employees and government contractors, falsifying time records is a federal crime that can result in prosecution and imprisonment. In the private sector, organized or large-scale time theft may be prosecuted as felony fraud or theft under state law, depending on the total dollar amount involved and the applicable jurisdiction.

How can small businesses prevent buddy punching?

Small businesses can prevent buddy punching by replacing shared PINs or paper timesheets with digital time clocks that verify the right person is clocking in. Photo check-in and GPS location confirmation make it nearly impossible for one employee to clock in for another — and they create a clear record that the right person was present, when they said they were.

What should you do if you catch an employee committing time theft?

Start by documenting everything with your time tracking records, not memory. Review your written timekeeping policy to confirm the employee understood the rules, then have a private, data-driven conversation. Apply consequences consistently with what your policy says.

‍

{{banner-cta}}

‍