Buddy punching in construction: what it costs and how to stop it

What is buddy punching

Buddy punching is the practice of one worker recording attendance on behalf of another. On a paper timesheet, that means signing a colleague's name. On a PIN-based system, it means entering their code. On a swipe card system, it means using their card.

The term comes from the era of physical time clocks where workers would "punch" a card on arrival. The buddy version is someone else doing the punching for you.

It happens for several reasons. Sometimes it is deliberate fraud: a worker arrives late and asks a colleague who is already on site to sign them in for the correct start time. Sometimes it is more casual: a gang finishes slightly early, one person fills in the sheet for everyone to save time. Sometimes supervisors do it themselves because chasing accurate records from 40 workers at 06:45 on a wet Monday is not their priority.

The result is the same in every case: you pay for hours that were not worked.

How common is it in construction

It is more common than most site managers want to believe. Research published by the American Payroll Association found that between 8% and 19% of employees admit to having clocked in for a colleague at least once. "Admitted to" is the key phrase. The actual figure is higher.

CIPD data on time theft in the UK workforce consistently shows that it is most prevalent in industries with large, dispersed workforces, manual record-keeping, and early shift starts with limited supervision. That is a near-perfect description of a UK construction site.

The construction-specific context matters here. A typical Tier 2 or Tier 3 commercial site might have 80 to 200 workers across multiple subcontractors, spread across multiple areas of the building, arriving between 06:30 and 07:30. There is no single supervisor watching every entry point. Workers know this. The sign-in sheet at the gate is often unattended. This is not a moral failing of the workforce; it is a structural vulnerability in how attendance is recorded.

Studies focused specifically on construction put the frequency of buddy punching higher than the cross-industry averages. A 2019 report from the Construction Industry Training Board found that 74% of contractors believed they had experienced some form of timesheet fraud in the previous 12 months. Most could not quantify it.

What buddy punching actually costs

The numbers become uncomfortable quickly once you apply them to a real site.

Take a site with 50 direct and subcontract workers. The average all-in labour rate, including subcontractor margin, is £200 per day (roughly £25 per hour for a 10-hour day including on-costs). Now assume that on any given day, 10% of those workers claim 30 minutes they did not work through buddy punching or inflated timesheets. That is five workers, 30 minutes each: 2.5 hours of ghost labour per day at £25 per hour.

These figures assume a 250-day working year and 22 working days per month. They also assume the fraud is relatively modest: 30 minutes per affected worker. On sites where timesheets are submitted weekly and checked loosely, the drift can be much larger. If workers consistently claim a full hour they did not work, the numbers double.

Our own data from customers who switched from paper to GPS-verified clock-in shows an average payroll reduction of 11% in the first three months. That aligns with the external research. On a labour bill of £500,000 per year, 11% is £55,000 returning to your business.

Why construction is particularly vulnerable

Most industries that have a buddy punching problem have it because supervision is thin. Construction has several additional factors that make the problem structurally harder to solve.

Large sites with multiple entry points

A commercial or civil engineering site rarely has a single gate. There are delivery entrances, pedestrian gates, separate access for different subcontractor areas, and often temporary entrances that open and close as the build progresses. Paper sign-in sheets end up duplicated across multiple points, which nobody reconciles until payroll day.

Workers across different companies

On a typical site, you might have your own directly employed workforce, three or four specialist subcontractors, and a labour-only gang or two. Each company manages its own timesheets. As a principal contractor or main subcontractor, you often have no visibility into whether the workers billed by your subs actually showed up on time. You receive an invoice and a timesheet. You pay the invoice. The timesheet is rarely audited in detail.

Early morning starts with no supervision

Construction starts early. 07:00 is standard; many sites have materials deliveries and plant operations from 06:30. Supervisors are often dealing with logistics at exactly the moment workers are arriving and signing in. Nobody is watching the gate. A worker who arrives at 07:45 and signs in for 07:00 will never be questioned if the sign-in sheet is collected from the gate at 09:00.

Subcontractor workers are harder to verify

If a worker from a subcontractor does not show up, who notices? The sub's foreman might. They might not. The principal contractor's site manager has no way of knowing unless they walk every area and take a manual count, which is not a practical daily task on a 200-person site.

None of this means construction workers are less honest than workers in other industries. It means the environment makes it easy, and easy opportunities become habits.

Three methods to detect and prevent buddy punching

There is no single solution that works perfectly in every site context. The right approach depends on your site layout, the mix of directly employed and subcontract workers, and what technology your workers already use. Here are the three methods that actually reduce buddy punching in practice.

1. Biometric clock-in via worker's own phone

Workers clock in using their own smartphone. The app requires Face ID, fingerprint, or device biometric before submitting the clock-in record. Because the biometric is tied to the device owner, a colleague cannot clock in on your behalf unless they have your phone and your face or fingerprint.

This is the most effective method for sites where all workers have smartphones. The friction is low for genuine users: clock-in takes under 10 seconds. The friction for fraudulent clock-ins is effectively prohibitive. See how this works in AttendIQ's time and attendance feature.

2. GPS geofencing

Workers can only clock in when their device is physically inside the site boundary. The site boundary is defined as a GPS geofence: a polygon drawn around the site perimeter in the admin system. When a worker taps to clock in, the app checks their GPS coordinates against the geofence. If they are outside the boundary, the clock-in is rejected.

This method stops buddy punching where the absent worker has not yet reached site. A colleague on site cannot clock in someone who is still on the train. It is less effective against workers who are already on site but trying to claim an earlier start time, which is why it works best in combination with method one.

3. Photo capture at clock-in

The app takes a photo at the moment of clock-in and attaches it to the attendance record. Supervisors can review photos for any clocked-in workers. This is not a real-time check but creates a retrospective audit trail. If a worker's photo at 07:00 shows them standing in a car park clearly not on site, that is evidence. It also acts as a deterrent: workers who know photos are being taken are much less likely to attempt fraud on behalf of a colleague.

For a detailed look at replacing paper entirely, see our guide to digital timesheets for construction.

How GPS-verified clock-in works in practice

The practical mechanics matter. If the technology is clunky, workers will not use it properly, and supervisors will not enforce it. Here is how GPS-verified clock-in works in AttendIQ, and why the approach is harder to game than it might appear.

What happens when a worker clocks in

1. The worker opens the AttendIQ app on their personal smartphone. No shared kiosk or tablet is required, though both are supported for workers without phones.
2. The app requests their device biometric (Face ID or fingerprint) before allowing a clock-in attempt.
3. Once the biometric passes, the app reads the device GPS coordinates. This check is performed server-side: the device sends its location to the server, which compares it against the stored site geofence. The check cannot be manipulated by changing settings on the device itself.
4. If the GPS check passes, the clock-in is recorded with a server timestamp (not the device clock, which can be manipulated), the GPS coordinate, the device identifier, and an optional photo.
5. If the GPS check fails because the worker is outside the boundary, they receive a clear message and the clock-in is not recorded. Supervisors can manually override with a reason code, which is logged in the audit trail.

What happens with anomalies

AttendIQ flags clock-in records that do not match expected patterns. If a worker clocks in at a location 500 metres from the site boundary, or if the GPS coordinates fluctuate unusually between check-in and check-out suggesting the device was not on site for the full period, the record is flagged for supervisor review. These flags are not automatic accusations. They are prompts to investigate.

Anomaly detection also covers impossible clock-ins: a worker clocking in on two different sites 50 miles apart within 30 minutes, for example. These records are held for review rather than paid automatically.

What about workers without smartphones

Not every construction worker has a compatible smartphone. For these workers, a tablet kiosk at the site entrance works as the clock-in point. The kiosk uses a QR code or PIN combined with a webcam photo. It does not offer the same biometric strength as a personal device, but it is substantially better than a paper sign-in sheet. The GPS check is replaced by the physical location of the kiosk, which is fixed on site.

The audit trail argument

Preventing buddy punching is the primary goal. But there is a secondary benefit that matters once you are in a dispute: the ability to prove what actually happened.

Paper timesheets are almost useless as evidence in a pay dispute. A handwritten sheet can be altered. There is no way to prove the time written down corresponds to when the worker actually arrived. In an employment tribunal or a commercial dispute with a subcontractor over labour charges, a paper timesheet is weak evidence for either side.

Digital clock-in records are different. Every clock event in AttendIQ includes:

• A server-side timestamp, set by the server at the moment of receipt, not the device clock
• The GPS coordinate of the device at the time of the request
• The device identifier (the unique hardware ID of the phone or tablet)
• The user account that submitted the request
• An optional photo taken at the moment of clock-in
• A complete amendment log showing every change made to the record, who made it, and when

Every amendment is audit-logged. If a supervisor changes a clock-in time after the fact, that change is recorded with the supervisor's identity and timestamp. You can see the original record and every modification. This is the standard an employment tribunal expects when you are trying to demonstrate that an employee's claimed hours are inaccurate.

It also matters in disputes with subcontractors. If a sub bills you for 800 person-hours on a two-week package and your GPS records show 680 person-hours actually present on site, you have a documented basis for disputing the invoice. Without verified attendance data, you have no leverage.

The cost of building this audit trail is a software subscription. AttendIQ starts at £4.50 per worker per month. On a site of 100 workers, that is £450 per month. If GPS-verified clock-in recovers even 5% of a £500,000 annual labour bill, that is £25,000 per year recovered against a cost of £5,400 per year. The ROI case does not require buddy punching to be widespread. It requires it to exist at all.

For a full breakdown of time and attendance for construction sites, see our construction time and attendance guide. For guidance on moving from paper timesheets to a digital system, see our digital timesheets for construction guide.