Skip to content
How-To

Time Theft in NZ: What Buddy Punching Really Costs Your Business

Time theft and buddy punching quietly drain NZ payrolls. Here’s what they actually cost, what the law expects of you, and how to stop it fairly — without turning your workplace into a surveillance state.

8 July 20268 min readClockie Team

Time Theft in NZ: What Buddy Punching Really Costs Your Business

Time theft is the payroll leak most NZ business owners never see. It rarely shows up as one big number — it hides in a few rounded-up minutes here, a mate clocking in for someone running late there, and a handful of "forgot to clock out" shifts every fortnight. Added up across a year, it can quietly cost thousands.

This guide breaks down what time theft actually is, what it costs, what New Zealand law expects of you as an employer, and how to stop it in a way that's fair to your team.

What counts as time theft?

Time theft is being paid for time not actually worked. In practice, it usually looks like:

  • Buddy punching — one employee clocking in or out for another who isn't there yet (or has already left).
  • Time rounding / "creep" — writing 8:00 when you started at 8:12, every day.
  • Long or unrecorded breaks — breaks that run over but aren't deducted.
  • "Forgot to clock out" — shifts that quietly stretch to the end of the day.
  • Ghost time — hours added to a paper timesheet that never happened.

Most of it isn't malicious. Paper timesheets and honesty-based systems simply make it easy, and small amounts feel harmless. The problem is that they compound.

How buddy punching adds up

The maths is unforgiving. Say five staff each gain 10 minutes a day they didn't work — a single late friend covered, a slightly generous start time. That's roughly:

  • 5 staff × 10 min × 5 days = 250 minutes/week
  • ≈ 4.2 hours/week × 52 = ~217 paid-but-not-worked hours a year

At an average wage that's real money — and it's money you're paying on top of KiwiSaver, ACC and leave loading, not just the base rate. If you want to see what an hour actually costs you once those on-costs are included, our Labour Cost Calculator does the sums for a New Zealand employee.

The point isn't the exact figure — it's that a small, invisible leak becomes a meaningful line item once you multiply it out.

Why paper timesheets and honesty systems fail

A paper sheet or a shared login can't tell you who actually clocked in — only that someone wrote a time down. There's no verification, no audit trail, and no way to reconcile the recorded hours against who was really on site. That's exactly the gap buddy punching lives in.

Digital clock-ins help, but only if they can confirm identity. A shared tablet with a single passcode everyone knows is barely better than paper.

Time theft and your obligations under NZ law

This is where New Zealand employers need to tread carefully — and it's the part most overseas advice gets wrong.

You're legally required to keep accurate records. Under the Employment Relations Act 2000 and the Holidays Act 2003, NZ employers must keep detailed wage, time, and holiday-and-leave records for each employee. Accurate time records aren't just good practice — they're a compliance requirement, and reconstructed or guessed timesheets can leave you exposed if you're ever audited by a Labour Inspector.

You can't just accuse someone. If you suspect an employee of time theft, New Zealand's good-faith and fair-process obligations still apply. That generally means investigating properly, putting concerns to the employee, giving them a real chance to respond, and following a fair disciplinary process before taking any action. Jumping to dismissal on a hunch is how a genuine payroll problem turns into a personal grievance.

The practical takeaway: the goal isn't to catch people out — it's to remove the ambiguity so the problem doesn't happen, and so your records are accurate if a dispute ever arises.

This is general information, not legal advice. For specific situations, talk to an employment law specialist or your advisor.

How to spot time theft

  • Clock-in times that are suspiciously round (always exactly on the hour).
  • Hours recorded when you know the person wasn't on site.
  • Timesheets that never quite match the roster.
  • "Forgot to clock out" happening regularly with the same people.

If you can't verify who clocked in, you can't confidently answer any of these — which is the real issue.

How to prevent it — fairly

You don't need biometric hardware or a surveillance culture. The fix is simply making clock-ins verified and accurate:

  • Verify identity at clock-in. Require a PIN plus a photo or on-device face match so the person clocking in is the person who's there. See how Clockie's verification works — you can dial the strictness up or down to suit your team.
  • Use a shared tablet with individual sign-in, not one shared passcode.
  • Apply breaks automatically so break time is deducted consistently.
  • Keep an audit trail so recorded hours can always be reconciled.

We've written a practical, no-hardware playbook for exactly this: How to Stop Buddy Punching Without Hardware.

Done well, verification is quiet and quick — a two-second check at the tablet — and it protects honest staff as much as it deters the rest.

The bottom line

Time theft isn't usually a people problem; it's a system problem. Paper and shared logins invite it, verified digital clock-ins remove it, and accurate records keep you compliant either way.

Clockie makes clock-ins verified and payroll-ready. PIN, photo or on-device face matching confirms who's clocking in, breaks are applied automatically, and every hour is recorded with an audit trail that flows straight to Xero and Crystal Payroll.

Try Clockie free — verification included on every plan.


Clockie is NZ-built time clock and visitor sign-in software with PIN/face verification, offline sync, and direct Xero & Crystal Payroll integration. Built for New Zealand businesses that want accurate hours without the paperwork.

See how verification works in Clockie

Ready to try Clockie?

14 days free. No credit card. No commitment.