Employee time theft happens when an employee is paid for time they haven't actually worked. It covers everything from clocking in a few minutes early to having a colleague punch in for you, and it costs employers an estimated $11 billion annually in the US alone, according to QuickBooks.
For shift-based businesses in hospitality, retail, and services, the problem is especially acute. Hours are logged across multiple people, locations, and shifts. Small discrepancies compound quickly. By the time a payroll error surfaces, the money is already gone.
This guide covers the 11 most common types of employee time theft, what the consequences look like for your business, and practical steps to stop it, including where automated time tracking removes the opportunity entirely.
What counts as employee time theft? The 11 most common types
Time theft isn't always deliberate. Some forms are calculated; an employee who routinely clocks in before they arrive, or asks a colleague to punch out for them at the end of the day. Others are habitual; extended lunch breaks that nobody ever challenged, or a slow drift into using work hours for personal tasks. All of them have the same result: you're paying for time that wasn't worked.
Here are the eleven types to know.
Buddy punching
Buddy punching occurs when one employee clocks in or out on behalf of another — usually to cover for someone who is late, leaving early, or not on site. It's one of the most common forms of time theft in shift-based environments, and one of the hardest to spot without the right systems in place.
A 2024 study published in the Human Resource and Leadership Journal found that roughly 75% of businesses lose money to buddy punching, with an average loss of $1,560 per employee per year. In a team of 20, that's a significant payroll exposure.
The fix is removing the opportunity: time tracking systems with geofenced clock-ins mean employees can only log hours when they're physically on site. No proximity to the job site, no clock-in.
Time clock manipulation
Time clock manipulation involves employees deliberately altering their clock-in or clock-out times — rounding up start times, pushing back end times, or editing timesheets after the fact to inflate hours worked.
This is distinct from buddy punching in that the employee is present, but the recorded hours don't reflect reality. It tends to happen where timesheet edits aren't audited and managers sign off on hours without reviewing them against the schedule.
The counter is a system where edits leave a visible trail and any deviation from the scheduled shift surfaces automatically for manager review, significantly reducing opportunities for time card fraud in the workplace.
Unauthorised or extended breaks
This is one of the most common (and most normalised) forms of time theft. An employee takes a 25-minute lunch instead of 20. A smoke break stretches to 15 minutes. Over a week, across a team of 15, that adds up to hours of paid time that wasn't spent working.
Extended breaks are often cultural: if it's never been challenged, employees don't see it as a problem. Clear break policies and consistent attendance write-ups for repeat issues in your employee handbook, combined with automatic break deductions in your time tracking setup, remove the ambiguity.
Unauthorised overtime
Unauthorised overtime is the flip side of extended breaks; employees working beyond their scheduled hours without approval. This increases your labour costs without the corresponding increase in output being planned or sanctioned, making robust overtime tracking solutions critical.
It tends to happen when managers don't have real-time visibility into who is clocked in, or when employees know that worked hours will automatically be paid regardless of whether they were authorised. Automated attendance systems that flag hours worked outside the scheduled window give managers the visibility to act before it hits payroll.
Ghost employees
Ghost employees are fraudulent payroll entries; fictitious individuals added to payroll to divert funds to whoever created them. This is more of a fraud issue than a day-to-day time theft problem, and it typically involves someone with payroll access and a lack of checks and balances.
Prevention relies on separation of duties (the person who adds employees to payroll shouldn't be the same person who approves it), regular audits, and secure access controls. Avoiding common payroll mistakes and weak controls is just as important. For most small and mid-sized businesses, this is a risk to be aware of rather than a common occurrence.
Personal activities during paid work hours
Browsing social media, online shopping, taking personal calls, running personal errands during work hours — this is cyberloafing, and it's widespread. Studies suggest it's one of the most financially significant forms of time theft in office and hybrid environments, even if it feels less deliberate than other types.
For shift-based businesses, the equivalent is employees spending paid time on their phone, socialising with colleagues beyond what's reasonable, or disappearing from their station. The line between acceptable and problematic isn't always clear, which is why clear expectations matter as much as monitoring and a broader stance on preventing employee theft of all kinds.
Misuse of paid time off and sick leave
Employees who call in sick when they're not, or who exploit flexible leave policies, are effectively getting paid for time they haven't worked. This is a more sensitive category because it's difficult to distinguish genuine illness from dishonest absence without creating a culture of suspicion.
The practical approach: robust absence tracking that makes balances and patterns visible to managers, so that anomalies (always sick on Mondays, consistently sick before bank holidays) can be spotted and addressed, while your overall absence rate is monitored and managed.
Working off the clock
Working off the clock (employees doing work-related tasks outside their clocked hours, without logging the time) is technically the employer's problem, not the employee's. In many jurisdictions, employees must be paid for all hours worked, including those worked outside scheduled shifts.
The risk: if employees are regularly working off the clock (answering messages after their shift ends, setting up before they clock in), you may owe back pay, and the liability sits with the employer. The fix is clear policy, guided by best practices for managing off-the-clock work, and a clocking system that makes it easy to log all time worked accurately.
Task padding
Task padding happens when employees deliberately slow their work pace or overstate the time a task takes in order to fill their shift or inflate billable hours. It's most common in roles where output is hard to measure directly; maintenance, administration, project-based work.
It's one of the harder types of time theft to detect because it relies on subjective judgement. The practical response is clear performance expectations, regular output reviews, and a culture where workload is openly discussed rather than gamed, supported by policies that reduce unnecessary overtime rather than reward it.
Time theft through proxy
A less commonly named but real pattern: an employee delegates their work to a colleague or subordinate, then claims the time (and credit) for themselves. In shift-based environments this might look like a senior team member giving their tasks to a junior and clocking a full day for light oversight.
Clear role definitions, fair workload visibility, and a manager who knows what each person is actually doing each shift are the best controls here.
Inflated mileage and travel expenses
Employees who exaggerate mileage claims or overstate travel time are stealing from company funds in a different way — not through timesheets, but through expenses. For businesses with field staff or delivery roles, this is worth auditing.
GPS tracking for work vehicles, requiring receipts, and using automated mileage logging apps all reduce the opportunity for inflation, just as accurate tracking of employee hours reduces payroll-related losses.
What are the consequences of employee time theft?
Time theft affects businesses in several compounding ways:
- Financial losses. The direct cost is significant: US employers lose an estimated $11 billion annually to time theft. For an individual business, even a few minutes per employee per day adds up to thousands in unnecessary payroll spend each year.
- Compliance risks. In many jurisdictions, inaccurate timekeeping is a legal liability — not just an operational one. Under the Fair Labor Standards Act (FLSA) in the US, employers are required to maintain accurate records of hours worked. The UK has equivalent obligations under the Working Time Regulations. Poor records expose you to wage and hour claims regardless of which side was responsible for the discrepancy, making robust employee timekeeping practices essential.
- Reduced productivity and morale. Time theft doesn't just cost money directly. Employees who do not engage in it often notice when colleagues do — and it erodes morale and trust across the team. The culture of dishonesty that unchecked time theft creates tends to spread.
- Reputational risk. If time theft escalates to formal disciplinary action or legal proceedings, the operational disruption is significant. Prevention is substantially cheaper than enforcement.
How to prevent employee time theft
Preventing time theft is less about surveillance and more about removing the conditions that make it possible. Here's what actually works:
- Set clear expectations from day one. A time and attendance policy in your employee handbook (covering break lengths, clock-in procedures, and the consequences of manipulation) removes the ambiguity that normalises minor theft. Employees who understand what's expected are less likely to push boundaries, and you have a documented basis for disciplinary action if they do.
- Use time tracking software with accountability built in. The single most effective prevention tool is a time and attendance software system where clock-ins are tied to location, edits leave a visible trail, and anomalies surface automatically. Shiftbase time tracking lets employees clock in from the app or a shared tablet, with geofenced locations available on Premium so clocking is only possible from approved sites. Managers can review and approve timesheets from a single overview, and any deviation from the scheduled shift flags for attention.
- Conduct regular audits. Periodic reviews of clock-in and clock-out records — looking for patterns like consistent clock-in rounding, unusually high overtime in specific teams, or repeat discrepancies on particular days — catch problems before they become established habits.
- Address issues promptly and consistently. A verbal warning for a first incident and a written warning for a repeat offence is a reasonable framework. The key is consistency: if time theft is addressed for some employees but overlooked for others, the policy loses credibility.
- Build a culture of accountability. Engagement matters. Employees who feel fairly treated, clearly managed, and genuinely part of the team are less likely to steal time. Tools that give employees visibility into their own hours (so they can see exactly what was recorded) reduce disputes and build the kind of mutual trust that makes time theft less attractive, especially when supported by reliable time clock software.
Stop time theft before it compounds
For most shift-based businesses, time theft isn't a dramatic fraud problem, it's a slow drain. A few minutes on every clock-in, breaks that run longer than policy allows, timesheets that nobody scrutinises closely, and hours that aren't tracked accurately across the workforce. Individually, the amounts are small. Across a team, over months, they're significant.
The most effective response isn't a heavy-handed monitoring policy. It's building systems where accurate timekeeping is the easy default: employees clock in the same way every shift, managers review exceptions rather than every entry, and any manipulation leaves a visible trail.
Shiftbase connects employee scheduling, time tracking, and absence management in one platform, supported by automated scheduling systems and flexible shift booking tools. Employees clock in via the app or a shared tablet, hours flow directly to timesheets, and managers approve and export to payroll without re-entry. Geofenced clock-ins on Premium mean location verification is automatic, not something you have to check manually.
Try Shiftbase free for 14 days — no credit card required.
- Easily clock in and out
- Automatic calculation of surcharges
- Link with payroll administration
