Key takeaways
- Buddy punching means one employee clocking in or out for another. It inflates hours and overtime.
- Cards and PINs are the easiest to share. Biometrics and face checks are much harder to fake.
- Mobile attendance works for field teams if it combines location, facial recognition and device locking.
- Attendance data should flow straight into payroll, so no one re-keys hours.
What buddy punching is
Buddy punching is when an employee clocks in or out on behalf of a colleague: tapping their card, entering their PIN, or using their login. It usually looks harmless, like covering for someone running ten minutes late. But it means paying for time that wasn't worked, and it can trigger overtime that was never earned.
Why it matters more than it seems
- Overtime adds up fast. Overtime for eligible staff is paid at 1.5 times the hourly basic rate, so false late clock-outs cost more than false early clock-ins.
- Payslips must be accurate. MOM requires itemised payslips that show overtime hours and pay. Bad attendance data means wrong payslips.
- Safety and site records. On construction and industrial sites, you need to know who is actually on site.
- Fairness. Staff who clock in honestly notice when others don't.
Attendance methods compared
| Method | Stops buddy punching? | Good for | Watch out for |
|---|---|---|---|
| Card or PIN | No: cards and PINs are easily shared | Low-risk, small offices | Lost cards, shared PINs |
| Fingerprint terminal | Mostly | Fixed entrances | Queues; hygiene; dirty or worn fingers |
| Face recognition terminal | Yes | Shared entrances, factories | One terminal per entrance |
| Mobile app with GPS only | No: a colleague can log in on their phone | Field teams | Location alone doesn't prove identity |
| Mobile app with GPS or beacon + face check + device lock | Yes | Offices, sites and field teams | Staff need smartphones |
Source: Avelogic analysis
Making mobile attendance trustworthy
Mobile clock-in is convenient, but on its own it only proves where a phone was, not who was holding it. A trustworthy mobile setup combines:
- Location: GPS for field work, or a Bluetooth beacon that only registers within 1 metre, for offices and sites.
- Identity: a face check at each clock-in, matched against the employee's registered face.
- Device locking: each account tied to one registered phone, so colleagues can't clock in for each other from their own phones.
- Trusted time: clock-in time checked against the server, not just the phone's clock.
Rolling it out fairly
- Explain why you're changing the system, and what data is collected. Facial images and locations are personal data under the PDPA, so tell staff the purpose and keep them secure.
- Provide a fallback, such as a face terminal, for staff without smartphones.
- Set clear rules for forgotten clock-ins, with a simple correction request and manager approval.
- Connect attendance to payroll, so approved hours and overtime flow straight to payslips.
HRKaki Attendance
Beacon or GPS clock-in with facial recognition and device locking, plus a face terminal for shared entrances, all connected to payroll.
Frequently asked questions
What is buddy punching?
When one employee clocks in or out on behalf of another, for example by using their card, PIN or login.
Which attendance system prevents buddy punching best?
Systems that verify identity at every clock-in, such as face recognition terminals, or mobile apps that combine a face check with device locking and location.
Is GPS attendance enough on its own?
No. GPS proves where a phone was, not who was using it. Combine it with a face check and device locking.
Sources
Information sourced from
Figures and rules in this article come from the official sources listed below, checked on 13 October 2026. Avelogic is not affiliated with these agencies. For the authoritative and latest position, refer to the agency directly.
- MOM: Hours of work, overtime and rest days
- MOM: Itemised payslips
- Personal Data Protection Commission (PDPC)
This guide is general information based on official sources at the date shown, not legal or tax advice. Rules change, so check the CPF Board, IRAS, MOM or MOE for the latest position.