Time Theft Prevention: A Practical Guide for Small Business

The most reliable way to prevent time theft is to combine three things: a written policy that says exactly how time must be recorded, a time clock that makes it hard to record time that was not worked, and a manager who reviews exceptions before payroll runs. Each piece is simple. Together they remove most of the gray areas where paid time quietly leaks away.

This guide walks through what time theft is, how to spot it, what a policy should say, how to investigate fairly, and how a small restaurant, shop, clinic or job site can set up controls without adding paperwork.

TL;DR

• Time theft is paid time spent on nonwork activity without the employer’s approval. It is often a habit or a misunderstanding rather than a deliberate scheme, so clear rules fix much of it.
• Write a short policy: how to clock in and out, who may edit time, what counts as falsifying records, and what happens if it occurs.
• Use a time clock that confirms who is punching, such as photo verification, and location checks for people working away from a single site.
• Review exceptions every pay period before payroll. Treat odd records as a reason to ask questions, not as proof.
• Investigate before you accuse. Keep records, interview fairly and write down your decision.

Table of Contents

• What time theft is and what it looks like
• Why it happens
• Warning signs worth watching
• How to prevent time theft: six controls that work
• What an employee time theft policy should include
• Know the wage and hour rules before you act
• How to investigate suspected time theft fairly
• Our perspective
• Put these controls to work with Kloqk
• A simple rollout plan for a small team
• FAQ
• Sources

What time theft is and what it looks like

Time theft happens when an employee is paid for time spent on something unrelated to work, without the employer’s authorization. Forbes Advisor notes that despite the word “theft,” it is more often a misconduct issue than outright stealing, and frequently it is not intentional. That framing matters for how you respond: a person who drifts into a ten-minute habit needs a clear rule, while a person who clocks in a friend needs a different conversation.

Common examples in hourly workplaces:

• Buddy punching. One person clocks in or out for another. We cover the legal and cost side in our guide to whether buddy punching is illegal and in what buddy punching is and how to stop it.
• Early and late punches. Clocking in before actually starting, or leaving the clock running after the shift is done.
• Extended breaks. Meal or rest breaks that run well past their scheduled length without being recorded.
• Personal activity on the clock. Errands, long personal calls or phone use during paid time.
• Unauthorized overtime. Staying on the clock past the scheduled end to push hours over the limit.
• Edited timesheets. Adjusting hours after the fact, or asking a manager to “fix” a punch that never happened.

A longer catalog of patterns is in our piece on common time fraud tactics hourly workers use.

Why it happens

Most time theft has dull causes. Rules are vague, so nobody knows whether five minutes of setup counts. Managers approve timesheets without looking. The punch method is easy to share: a PIN written on the wall, a shared tablet, a paper sheet filled in at the end of the week. Some employees also feel underpaid or ignored and decide the extra minutes are owed to them.

That last point is worth taking seriously. Workplaces where people feel noticed and fairly treated tend to have fewer disputes over a few minutes. Fixing process gaps and treating people consistently work together. Technology makes dishonesty harder, and a clear conversation makes it unnecessary.

Warning signs worth watching

The Washington State Auditor’s Office published a list of red flags for time theft written for remote work, but several apply to any workplace:

• Long stretches without responding when the schedule says the person should be available
• Regularly late or missing for scheduled meetings
• Long or frequent breaks that are not recorded
• Logging a full day while starting late or ending early
• Logging a full day while doing personal activities
• Taking unauthorized overtime
• Buddy punching

One red flag is a prompt to look closer. A pattern across several pay periods is something to act on. Keep the distinction clear, because records that look strange can have innocent explanations: a forgotten punch, a broken device, a manager’s verbal approval that never got written down.

How to prevent time theft: six controls that work

1. Write the rules in plain language

People cannot follow a rule they have never read. A short written policy, signed at hire and reviewed once a year, does more than any monitoring tool. The next section covers what to put in it.

2. Make the punch prove who is punching

Shared PINs and paper sheets are the easiest things to abuse. Verification at the moment of the punch closes that gap. With Kloqk, photo verification for clock-ins is part of the free plan, so a manager can see who actually punched in without buying an add-on. Employees know a photo is attached, which is usually enough to end casual buddy punching.

3. Tie the punch to the place

For a restaurant with one location, a kiosk at the back door does the job. For crews who start on different job sites, or staff who punch from their phones, location checks help confirm the punch happened where work happens. GPS geofencing lets you set the boundary around a site so a punch from the driveway at home gets flagged. See how it works on our GPS time clock page. For distributed teams, our guide to remote employee time tracking covers the extra steps.

4. Control who can edit time

Every edit should have a name, a date and a reason. If anyone can change a punch without a trace, you do not have a time record, you have a suggestion. Limit editing rights to a small number of managers, and ask employees to submit correction requests rather than asking a friendly supervisor to change hours verbally.

5. Let the system calculate breaks and overtime

A lot of “theft” is arithmetic that nobody checked. If breaks are auto-deducted without anybody confirming they were taken, or overtime is counted by hand, errors creep in both directions. Our overtime tracking software applies break and overtime rules by state, so what reaches payroll is consistent.

6. Review exceptions before payroll, every time

The single habit with the biggest payoff is a ten-minute review before payroll closes. Look for missing punches, unusually long shifts, punches far from the scheduled start, edits and overtime nobody approved. Teambridge, a workforce management firm, makes the point that suspicious records are not proof by themselves and that decisions on exceptions should be recorded before payroll. A short note beside each exception is a good standard.

What an employee time theft policy should include

Keep the policy to one page. It should cover:

1. How time is recorded. Which clock, app or kiosk is used, and that employees must punch themselves.
2. Accuracy and certification. The Montana Department of Labor & Industry’s model employee handbook says nonexempt employees are responsible for using timecards to accurately record when they begin and end work and meal periods, and that employees must sign to certify accuracy.
3. No falsifying or tampering. The same model handbook says no employee may falsify or tamper with their own or another employee’s time card records, and that clocking another employee in or out is grounds for termination.
4. Daily responsibility. The University of Maine System’s administrative practice letter states that each non-exempt employee must make sure time worked and leave taken is accurately reflected, and that timesheets are submitted daily to meet payroll deadlines. A daily habit is easier to keep honest than a weekly reconstruction.
5. Breaks. When breaks start and end, whether they are paid, and how they are recorded.
6. Approval of overtime. Overtime must be approved in advance, but overtime that was worked must still be paid.
7. Consequences. A clear ladder from coaching to written warning to termination, applied the same way to everyone.
8. Reporting. Who an employee can go to if they think their time was recorded wrongly.

Those last two items protect you. A policy that is only about punishment reads as a trap; a policy that also tells people how to correct a mistake reads as fair, and it is easier to defend if a dispute arises. Have it reviewed by an employment attorney in your state, because rules on breaks, final pay and discipline differ.

Know the wage and hour rules before you act

Prevention only works if your own records are sound. Under the Fair Labor Standards Act, as summarized in the Department of Labor’s FLSA training materials (April 2026), employers must pay non-exempt employees at least one and one-half times their regular rate for hours worked over forty in a workweek. The same materials say:

• Rest breaks of 20 minutes or less are compensable.
• Bona fide meal periods, typically 30 minutes or more, generally need not be paid if the worker is completely relieved of duty.
• Covered employers must keep certain records, including total hours worked and overtime compensation for non-exempt employees. The law does not require a time clock or any particular format.

Two practical consequences follow. First, you cannot treat an unpaid break as time theft if the employee was working through it. Second, you cannot shave hours as a penalty. If a person worked, they are paid, and discipline is handled separately. States can add stricter rules on meals, rest breaks and daily overtime, so check your state labor department. For a deeper look, read our FLSA overtime rules guide, and if you manage salaried staff, see whether salaried workers can get overtime.

You may also hear about the “7-minute rule.” It is a common way to round punches to the nearest quarter hour, and it is not a license to ignore time. Rounding must not, over time, leave employees underpaid. A time clock that records exact punches and lets payroll apply a consistent, neutral rule avoids the problem entirely.

A note on the broader risk picture: time theft is one of several ways a small business can lose money, alongside property damage and liability claims. A business owners policy guide explains how property and liability coverage can be bundled, which is a separate question from controlling payroll accuracy.

How to investigate suspected time theft fairly

When the review turns up something real, slow down. The goal is an accurate answer, not a quick one.

1. Preserve the records. Save the punch history, edit logs, photos and schedules as they stand. Do not alter anything.
2. Look for independent evidence. Time records are strongest when they line up with something else: sales, deliveries, completed work, door logs, or a supervisor’s direct observation. A pattern across several shifts carries far more weight than a single odd punch.
3. Check for honest error. A forgotten punch, a dead phone or a confusing schedule explains many exceptions. Ask before you assume.
4. Document the process. Case IQ, an investigations software company, recommends collecting and preserving evidence before discipline, noting how it was collected, keeping a case file, using more than one investigator, interviewing the employee and witnesses, and keeping the matter confidential.
5. Meet with the employee. Show them the records, let them respond, and write down what they said.
6. Decide consistently. Apply the same standard you would apply to anyone else in the same role and situation.

Can an employee be fired for time theft? In most U.S. workplaces, falsifying time records is a recognized reason for termination, and model handbooks like Montana’s say so for clocking in a coworker. Your exact options depend on your state, any contract or union agreement, and what your own handbook promises. If you are about to terminate or the facts are contested, talk to an employment attorney first. Is it hard to prove? It is as hard as your records are weak. Photo-verified punches, edit logs and location data make the answer much clearer than a manager’s recollection.

Our perspective

We built Kloqk because we think time accuracy should not depend on how much a small business can spend. Most of the owners we hear from run restaurants, shops, clinics or crews, and they do not have an HR department. They have a stack of timesheets on Sunday night.

Our view is that the best defense against time theft is making the honest path the easy one. When every employee punches for themselves, with a photo attached, and the system works out breaks and overtime the same way each time, there is very little left to argue about. Managers stop playing detective and start reviewing a short list of exceptions.

That is why unlimited employees, overtime and break calculations, photo verification and payroll exports sit in our free plan. Paying to find out who really clocked in seems backwards to us. If you grow into scheduling, PTO or hiring tools, upgrades are there, but accurate payroll-ready hours should not wait on a subscription.

Saad

Put these controls to work with Kloqk

If you want the controls above without a budget conversation, start with Kloqk’s free time clock software. The free plan includes payroll-ready timesheets, overtime and break calculations, photo verification for clock-ins, mobile and kiosk punching, a team management dashboard and payroll exports. Paid plans are optional: Pro is $29 per month per location and Premium is $59 per month per location, and you can compare what each adds on the pricing page.

Set up one kiosk or have your team punch from their phones, turn on photo verification, and run your next pay period from the exceptions list. You can also read our step-by-step guide to stopping time theft and see the numbers in buddy punching statistics.

A simple rollout plan for a small team

You do not need a big project. A workable sequence for a business with a handful of locations looks like this:

1. Week one: talk first. Tell the team what is changing and why. Frame it as accurate pay for everyone, not as suspicion. Share the one-page policy and have each person sign it.
2. Week one: set up the clock. Add employees, set pay periods, choose the break and overtime rules for your state, and decide whether you need a kiosk, phones or both.
3. Week two: run it in parallel. Compare the new records to your old method for one pay period. Fix any schedule mistakes and missing punches.
4. Week three onward: review exceptions. Before each payroll, scan for missing punches, edits and unapproved overtime. Record your decision on each one.
5. Quarterly: revisit. Look at where exceptions cluster by shift, location or manager. A hot spot often points to unclear instructions, not bad people.

Restaurants usually benefit most from break tracking and kiosk punching at the back door. Construction supervisors tend to care about location checks and overtime. Clinics need tidy exports for whoever runs payroll. Retail owners need consistent rules across part-time schedules. The same six controls cover all four.

FAQ

Can an employee be fired for time theft?

In most cases, yes. Falsifying time records, including clocking in for a coworker, is commonly listed as grounds for termination in employer handbooks and government model policies. Your state law, any contract and your own written policy shape what is allowed, so document the facts and speak with an employment attorney before terminating.

Is time theft hard to prove?

It is hard when you rely on suspicion or a single odd punch. It becomes much easier when time records are cross-checked against independent evidence such as sales, completed work or direct observation, and when you can show a pattern over several shifts. Photo-verified punches and edit logs strengthen your case.

What is the 7-minute rule?

It is a rounding practice that moves punches to the nearest quarter hour: the first seven minutes round down and the next seven round up. Rounding is acceptable only when it does not, over time, cheat employees of pay they earned. Recording exact punches and applying one neutral rule is the safest approach.

What are some examples of time theft?

The most common are buddy punching, starting the clock early or stopping it late, taking longer breaks than recorded, doing personal tasks while paid, and getting unauthorized overtime. Editing a timesheet after the fact also counts when the hours were not actually worked.

Does the law require a time clock?

No. The Department of Labor’s FLSA materials say covered employers must keep accurate records of hours worked, but they do not require a time clock or a specific format. A digital time clock simply makes accurate records easier to keep and verify.

Sources

• What Is Time Theft & How Can You Prevent It? (Forbes Advisor)
• Strategies for identifying and combatting time theft in remote work environments (Washington State Auditor’s Office)
• Employee Handbook: Sample Policies (Montana Department of Labor & Industry)
• Administrative Practice Letter IV-O (University of Maine System)
• FLSA Comprehensive training presentation (U.S. Department of Labor, Wage and Hour Division)
• How to Fire an Employee for Stealing: A Step-by-Step Timeline (Case IQ)
• Business Owners Policy (BOP) Guide (Daly & Alexander Insurance)

Recommended

• How to Stop Time Theft: Practical Steps for Small Business
• Why Employee Time Theft Happens: A Manager’s Guide
• Time Theft at Work: Forms, Costs, and How to Stop It
• Time Clock Software for Small Business (Free)