Time Theft at Work in 2026: What the Data Actually Shows
Time theft is an employer term for paid time an employee did not actually work: hours recorded on a timesheet that were not spent working, a shift clocked in by a coworker, or a paid day absorbed by personal tasks. It is a payroll and timekeeping concept rather than a criminal charge, and mixing up the two is where most policies go wrong. That is the short time theft definition. The longer answer is more useful, and it has to start with a problem in the evidence.
We went looking for the statistics that dominate this topic and could not verify a single one against a primary source. The figures you have probably seen quoted, a headline annual cost to US employers, a fixed number of hours lost per employee per week, a precise share of hourly workers who admit padding their hours, appear almost entirely on the blogs of companies that sell time tracking software. Those pages cite each other. Follow the chain back and you reach a dead link.
So this is not a statistics roundup, because we do not have one we could defend. What we can give you is a clear definition, an honest account of what US law does and does not say, what employers actually do when they suspect it, and a reframe we think matters more than any of it: most of what gets labeled time theft at work is fragmented work, not dishonesty.
What is time theft?
Time theft is any situation where an employee is paid for time they did not work. That is the whole definition, and it is deliberately broad. It covers clear-cut acts, such as recording hours never worked or having someone else clock you in, and it covers a wide gray zone that many people would not call theft at all, such as a long lunch, a personal errand on a slow afternoon, or a timesheet reconstructed on Friday for a week that has gone blurry.
Common examples of time theft at work
- Buddy punching, where one employee clocks in or out on behalf of another.
- Recording start and stop times that are approximately true rather than true.
- Claiming overtime that was not worked.
- Extended or unrecorded breaks taken as paid time.
- Personal activity during paid hours, which is where nearly all the disagreement lives.
The first four are checkable events. The last one is a judgment call about what a paid hour is supposed to contain, and reasonable people draw that line in very different places. A policy that treats all five as the same offense will produce unfair outcomes fast, and the people watching will notice before the person disciplined does.
Why time theft statistics do not survive a source check
Almost every widely quoted time theft statistic fails a basic source check. A usable figure names the organization that collected it, the number of people surveyed, the dates it was fielded, and who was in the sample. The famous numbers on this topic carry none of those in any version we could find, and the primary links they point to no longer resolve.
We are saying this out loud rather than quietly leaving the numbers out, because the consequence is real. Companies write disciplinary policy, buy software, and justify monitoring on the strength of a cost figure nobody can trace to a study. If the figure is wrong, or was never measured, the policy built on it is arbitrary, and the employee on the receiving end has nothing to argue against. We ran the same test across the employee monitoring statistics US managers can actually trust, and the citation pattern there is identical.
Our position is simple: write the sentence without the number. You do not need a national cost estimate to justify accurate timekeeping. You need a clear policy, a system people can use honestly, and a manager who notices when something looks off. None of that depends on knowing what time theft costs American employers in aggregate, which is fortunate, because as far as we can tell nobody credibly knows.
Is time theft illegal?
There is no federal crime called time theft, and in general US terms it is best understood as a wage and hour matter rather than a criminal one. The Fair Labor Standards Act, the main federal law in play, governs hours worked and pay for non-exempt employees, and it requires employers to pay for hours actually worked and to keep accurate records of them. That obligation runs both ways. An employee who records hours they did not work creates a payroll error, and an employer who fails to pay for hours that were worked creates one too.
Deliberate falsification of records can carry consequences beyond termination depending on the facts and the state, including civil claims. We are not going to attach a number to any of that, and you should treat pages that do with suspicion. What matters practically is the constraint on your response rather than the label on the behavior: deductions from pay, withheld final paychecks, and clawbacks are limited by federal and state wage law, and those limits differ meaningfully from one state to the next.
General information, not legal advice
Wage and hour law varies by state, and the rules differ for exempt and non-exempt employees. Before you deduct pay, withhold a check, or discipline someone over recorded hours, confirm the specific rule with employment counsel in the state where that employee works. If you employ staff in the EU, data protection law adds requirements on top of anything described here.
The safer route is almost always a timekeeping system people can use accurately without thinking about it, which is the whole argument in our guide to time tracking for remote employees that your team will support. Accurate records prevent the dispute. Legal remedies only manage it after it has already cost you something.
Employee time theft punishment: what employers actually do
Most employers handle suspected time theft through progressive discipline, not pay deductions or police reports. The usual sequence is a conversation, then a documented verbal warning, then a written warning, then final warning or termination if the behavior continues. Immediate termination is generally reserved for deliberate, provable falsification, such as one employee clocking in for another where there is a record of it.
The distinction that decides the outcome is between an honest timekeeping error and deliberate falsification, and in our experience most cases are the former by a wide margin. People forget to clock out. They rebuild a week from memory on Friday afternoon. They record the shift they were scheduled for rather than the shift they worked. Those are system failures, and treating them as theft damages trust with the whole team, not only the person being disciplined.
| What you observed | Most likely explanation | Proportionate first response |
|---|---|---|
| Hours consistently rounded to the half hour | Timesheet filled in later from memory | Change when and how hours get entered, then re-check next month |
| A missing clock-out, corrected the next day | Forgot, or the device was not available at the end of the shift | Correct the record, note it, no discipline |
| One person's credentials used while they were absent | Deliberate falsification by someone | Formal investigation with HR, document everything, involve counsel |
| Long unrecorded breaks across a whole team | The break policy is unclear or unworkable in practice | Rewrite the policy with the team, then set the expectation once, clearly |
| Low visible activity in a knowledge role | Focused work, or a day cut to pieces by interruptions | Look at delivered work and workload, not keystroke counts |
| Overtime claimed with no matching work product | Genuinely unclear, needs a conversation before anything else | Ask directly, in private, before forming a view |
Deductions and clawbacks are the riskiest tool in the box, legally and culturally, which is why the sequence in our walkthrough of how to roll out time tracking without losing trust puts fixing the system well ahead of touching anyone's paycheck. If your timesheets are wrong often enough to worry you, the first hypothesis should be that the timesheet process is bad, not that your staff are.
Most time theft at work is fragmented work, not dishonesty
The most useful thing we can tell a manager worried about stolen hours is that the hours are probably being lost to the shape of the workday rather than taken by anyone. Microsoft's Work Trend Index, published in June 2025 and combining anonymized Microsoft 365 telemetry with a survey of 31,000 knowledge workers across 31 markets fielded February 6 to March 24, 2025, found that people are interrupted roughly every two minutes during work hours, about 275 times a day.
The same research found 48% of employees and 52% of leaders describe their work as chaotic and fragmented, and that 57% of meetings are ad hoc with no calendar invite. An eight hour day cut into two minute pieces does not produce eight hours of finished work, and nobody stole anything. If you audit that day looking for missing productive time you will find plenty of it, and you will attribute it to the wrong cause.
The other half of the picture points away from theft entirely. The American Psychological Association's 2024 Work in America survey, conducted by The Harris Poll among 2,027 employed US adults between March 25 and April 3, 2024 with a margin of error of plus or minus 3.1 percentage points, found that 45% say they work more hours per week than they want to. That is not the profile of a workforce quietly shaving minutes off the clock. It is closer to the opposite problem.
The same survey found 67% had experienced at least one outcome associated with burnout in the past month, including low motivation, reduced effort, or feeling isolated. Reduced effort looks identical to time theft in a report and needs a completely different response, which is why the signs of employee burnout hiding in your workload data are worth learning to read before you reach for a disciplinary process.
What to measure instead of hunting for time theft
Measure two things: whether the timekeeping system produces accurate records, and whether the work is getting done. Those are separate questions with different evidence and different remedies, and searching for stolen minutes answers neither one well.
- Write the question down first. "Are we paying for hours nobody worked" is a payroll accuracy question. "Is this person doing enough" is a performance question. Decide which one you have before you look at any data.
- Audit the process before the people. How are hours entered, how soon after the fact, and how easy is it to correct a mistake? A sheet filled in Friday for the whole week will be wrong regardless of anyone's intent.
- Look at delivered work over a month, not a day. Single days are noise. Patterns over a month are signal, and they survive the one bad week everybody has.
- Compare workload against capacity. If someone is carrying more than they can finish, the gap you are seeing is a planning failure, not a character one.
- Ask. A five minute private conversation resolves more timesheet anomalies than any report will, and it costs nothing if you are wrong.
That sequence is the practical core of how to measure employee productivity when you cannot see the work, and it applies just as well to a warehouse floor as to a distributed software team. Accuracy and performance stay separate the whole way through.
The wider version of the argument, including what belongs on a manager's dashboard and what should never make it there, sits in our complete guide to employee productivity. The short version is that any measure you would not be willing to explain to the person it describes is a measure you should not be collecting.
When suspicion actually is warranted
Sometimes it is real, and pretending otherwise is unfair to everyone recording their hours honestly. Take it seriously when the evidence is specific rather than statistical: a badge or login record placing someone somewhere they could not have been working, hours claimed for a shift documented as covered by another person, overtime submitted with no corresponding work product, or a pattern that persists after the process has been fixed and the expectation stated plainly.
Handle those through investigation, not surveillance. Broad monitoring switched on to catch a small number of people is expensive in trust and badly targeted, and it changes the behavior of everyone who was never the problem. If you do turn monitoring on, notice obligations may apply. New York Civil Rights Law section 52-c, for example, requires employers who monitor telephone conversations, email, or internet usage by electronic device to give prior written notice upon hiring, acknowledged by the employee and posted conspicuously. Monitoring law varies by state, so confirm your obligations with counsel wherever you employ people.
This advice does not apply everywhere, and you should ignore parts of it if you bill clients by the hour, run safety-critical shift work, or operate under recording obligations. In those settings precise time records are the product, not an inference about someone's character, and the accuracy bar is higher for good reason. For everyone else, the honest summary is that time theft is a small, real, and badly evidenced problem sitting underneath a much larger and better-evidenced one, which is that the workday has been chopped into pieces too small to be useful.
Key takeaways
- Time theft means paid time an employee did not work. It is a timekeeping and payroll concept, not a criminal charge.
- We could not verify a single widely quoted time theft statistic against a primary source. Policies built on those numbers are built on nothing.
- The Fair Labor Standards Act governs hours worked and pay for non-exempt employees. Deductions and clawbacks are constrained by federal and state law, so check with counsel before acting.
- Progressive discipline handles nearly every real case. Reserve termination for deliberate, provable falsification.
- Microsoft's 2025 data shows interruption every two minutes, and the APA found 45% of US workers work more hours than they want to. Lost hours are usually structural, not stolen.
Frequently asked questions
What is time theft?
Time theft is any situation where an employee is paid for time they did not work. That includes deliberate acts such as recording hours never worked or having a coworker clock you in, and it includes a large gray zone such as long breaks, personal errands during paid hours, and timesheets filled in from memory. It is a payroll and timekeeping concept, not a criminal charge.
Is time theft illegal in the US?
There is no federal crime called time theft. It is best understood as a wage and hour matter. The federal Fair Labor Standards Act governs hours worked and pay for non-exempt employees and requires accurate records of hours actually worked. Deliberately falsifying records can carry consequences beyond termination depending on the facts and the state, but the specifics vary, so confirm your situation with employment counsel.
What is the usual punishment for employee time theft?
Progressive discipline in almost every case. The typical sequence is a conversation, a documented verbal warning, a written warning, then final warning or termination if it continues. Immediate termination is generally reserved for deliberate, provable falsification such as one employee clocking in for another. Most cases never get that far because most cases are timekeeping errors.
Can an employer deduct pay or withhold a paycheck over time theft?
This is the riskiest response available and it is heavily constrained. Deductions from pay, withheld final paychecks, and clawbacks are limited by federal and state wage and hour law, and the rules differ by state and by whether the employee is exempt or non-exempt. Do not deduct anything without checking the specific rule with employment counsel in the state where the employee works.
Why does this article not include time theft statistics?
Because we could not verify a single one against a primary source. The figures that dominate search results for this topic appear almost entirely on the blogs of companies that sell time tracking software, and those pages cite each other rather than a study. The primary links they point to no longer resolve. We would rather tell you the evidence is missing than repeat a number we cannot stand behind.
Is taking a long break time theft?
It depends entirely on your break policy and whether the time was recorded as paid. If the policy is clear, the break is paid, and the employee took substantially more than allowed on a repeated basis, it is a real issue. If the policy is vague or unworkable, you have a policy problem rather than a dishonesty problem. Fix the policy first and see whether the behavior changes.
Does time theft apply to salaried employees?
It works differently. The Fair Labor Standards Act framework for hours worked and pay applies to non-exempt employees, and exempt salaried employees are generally paid for the job rather than by the hour. Deductions from an exempt salary are constrained by federal and state rules. For salaried staff the honest question is usually about performance and workload, not stolen minutes.
Is buddy punching time theft?
Yes. One employee clocking in or out on behalf of another is deliberate falsification of a pay record, and it is one of the few cases where the intent is unambiguous. It is also one of the few that produces checkable evidence. Investigate it formally, document what you found, and involve HR and counsel before you act.
How do you prove time theft?
With specific records rather than statistical patterns. Usable evidence looks like a badge or login record placing someone somewhere they could not have been working, hours claimed for a shift documented as covered by another person, or overtime submitted with no corresponding work product. A low activity graph is not evidence. It usually reflects focused work or a fragmented day.
What is a better way to handle suspected time theft?
Separate the two questions you are actually asking. Payroll accuracy is a process question: how are hours entered, how soon after the fact, and how easy is it to correct a mistake. Performance is a separate question with different evidence and different remedies. Fix the timekeeping process first, look at delivered work over a month rather than a day, and ask the person directly. Most anomalies resolve in a five minute conversation.