To report time theft, gather dated evidence of the hours in question, then submit it through your employer’s HR department, compliance portal, or anonymous ethics hotline. That is how the great majority of these reports get handled. Outside agencies enter the picture only in narrower situations: when the employer itself is falsifying payroll, or when inflated hours are being billed to the federal government. Knowing how to report time theft well is mostly about documentation and picking the right channel for what you actually saw.
What Counts as Reportable Time Theft
A coworker glancing at their phone is not time theft. Reportable conduct is a pattern or a deliberate act that results in someone collecting pay for time they clearly did not work. The common forms are:
- Buddy punching, where one employee clocks in or out for another who isn’t physically present.
- Timesheet manipulation. Adding 15 minutes a day to a manual timesheet can total hundreds of hours over a year.
- Consistently extended breaks that aren’t approved or deducted from recorded hours.
- Running personal business, side work, or extensive personal calls during hours logged as productive work.
Federal rules require employers to count as hours worked any time an employee spends on assigned duties, including small increments of regular working time. But employers only owe pay for time when work is actually performed, so an employee who clocks in early and does no work is not owed those minutes. Large gaps between clock records and actual work are the kind of pattern that justifies a report.1U.S. Department of Labor. FLSA Hours Worked Advisor – Recording Hours Worked
One boundary worth naming: this all assumes an hourly, non-exempt employee whose inflated hours translate directly into inflated pay. Salaried exempt workers are a different situation, because under the salary basis test an exempt employee must receive full salary for any week in which they perform any work.2U.S. Department of Labor. Fact Sheet 17G – Salary Basis Requirement and the Part 541 Exemptions With exempt employees, the report is really about failure to perform duties, and HR handles it accordingly.
Build Your Documentation Before You File
A report without evidence is an accusation, and it will be treated as one. Before you submit anything, put together what you can actually show.
- Timekeeping records. If you can see the payroll or scheduling system, compare claimed hours to actual presence. Look for patterns, not one-off discrepancies.
- Badge, parking, and security access logs. These create an independent timeline of when someone was physically on-site.
- Digital activity data. Computer login and logout times, VPN connections, and application usage show when someone was actually working on a company device. For remote employees, this is often the only objective evidence.
- Your own contemporaneous notes. Write down what you observed on the day you observed it. “On March 12, I arrived at 8:05 AM and [employee] was not at their workstation despite being clocked in since 7:45 AM” is far more useful than a general complaint filed from memory weeks later.
Organize everything chronologically. If you can estimate a dollar figure using the employee’s pay rate and the discrepancies you have logged, include it. Investigators take a report more seriously when the financial impact is spelled out, even as a rough number.
Filing an Internal Report
Internal reporting is the correct starting point for almost every time theft situation. Your employer has investigative tools no outside agency has for internal personnel matters: access to timekeeping systems, badge logs, digital activity records, and the authority to interview everyone involved.
Most companies offer several channels. Larger employers maintain a dedicated HR portal or compliance software where you upload documentation and describe the issue. A formal email to your supervisor or department head works when no portal exists and creates a timestamped written record. If you don’t want your name attached, many larger employers run anonymous tip lines through third-party vendors. Your employee handbook or company intranet should list which channels are available.
Expect an acknowledgment after you submit, whether that’s an automated confirmation or a tracking number. If you hear nothing within a week, follow up in writing. HR teams juggle competing priorities, and a polite nudge keeps your report from getting buried.
What Happens Next
After receiving a credible report, the employer typically opens an internal investigation. That usually means pulling timekeeping and access records, reviewing digital activity, and interviewing the accused employee and any witnesses. Those interviews should be private and voluntary; an investigator should not physically confine an employee or suggest they can’t leave.
If the investigation confirms time theft, discipline ranges from a written warning to termination for cause, depending on the pattern and the employer’s policy. In serious cases involving large amounts, some employers pursue civil recovery under theories like conversion or fraud, but most simply terminate and move on. Lawsuits to claw back stolen wages are expensive relative to what’s usually at stake.
When to Report to an Outside Agency
External reporting is for a narrower set of situations. The Department of Labor’s Wage and Hour Division handles employer-level payroll violations, not disputes between coworkers about who is slacking. You would contact the DOL if your employer is systematically falsifying payroll records, requiring off-the-clock work, or if management appears to be complicit in the time theft.
To file a complaint with the WHD, call 1-866-487-9243 or submit a general inquiry online. A representative will follow up by phone or email to discuss the situation and decide whether a formal investigation is warranted.3Department of Labor Wage and Hour Division. Wage and Hour Division General Inquiry Form Complaints are confidential, and the employer is not told who filed.4U.S. Department of Labor. How to File a Complaint
Time Theft on Government Contracts
When inflated hours are billed to the federal government, the stakes jump. That conduct can violate the False Claims Act, and a private individual with knowledge of the fraud can file a qui tam lawsuit on the government’s behalf as a “relator.”5United States Department of Justice. Criminal Resource Manual 932 – Provisions for the Handling of Qui Tam Suits Filed Under the False Claims Act
The relator files a civil complaint under seal in federal court, so the defendant doesn’t know about it, and delivers a written disclosure of all material evidence to the Attorney General and the U.S. Attorney. The government then has 60 days to investigate and decide whether to intervene, though extensions are common. If the case succeeds, the relator receives a share of the recovery, with the percentage depending on the government’s level of participation. This is not a solo project. Anyone considering a qui tam action needs a False Claims Act attorney from the beginning.
Whistleblower Protection Against Retaliation
Fear of retaliation is the main reason people don’t report. Federal law addresses that risk through several overlapping protections, and which one applies depends on your employer and what you reported.
FLSA Anti-Retaliation
The Fair Labor Standards Act prohibits an employer from firing or discriminating against any employee who files a wage complaint, participates in an investigation, or testifies in a related proceeding.6Office of the Law Revision Counsel. 29 U.S. Code 215 – Prohibited Acts The protection covers both formal DOL complaints and internal wage complaints to your employer. A retaliation claim under the FLSA must be brought within two years of the retaliatory action, or three years if the retaliation was willful.
Sarbanes-Oxley for Publicly Traded Employers
If you work for a publicly traded company or one required to file reports with the SEC, the Sarbanes-Oxley Act provides additional protection when you report conduct you reasonably believe is securities fraud, wire fraud, bank fraud, or an SEC rule violation. A SOX-covered employer cannot fire, demote, suspend, threaten, or harass you for providing information to a federal agency, a member of Congress, or a supervisor with authority to investigate misconduct.7U.S. Department of Labor. Sarbanes-Oxley Act of 2002, PL 107-204, Section 806
If retaliation occurs, SOX entitles you to reinstatement with the same seniority you would have had, back pay with interest, and compensation for special damages including litigation costs and attorney fees.8Office of the Law Revision Counsel. 18 U.S. Code 1514A – Civil Action to Protect Against Retaliation in Fraud Cases A SOX retaliation complaint must be filed within 180 days of the retaliatory action or within 180 days of becoming aware of it.9Whistleblowers.gov. Sarbanes Oxley Act SOX, 18 USC 1514A That deadline is firm.
Across these frameworks, a common thread is that your belief in the wrongdoing has to be reasonable, meaning grounded in facts a disinterested observer would credit.10U.S. Merit Systems Protection Board. Whistleblower Protections for Federal Employees – The Reasonable Belief A report backed by specific dates, times, and records clears that bar. A report that amounts to “I just feel like she’s not working” does not.
Protecting Yourself as the Reporter
Reporting a coworker can create friction even when you’re entirely right. A few habits reduce your exposure.
- Use anonymous channels when they exist. If your employer runs a third-party hotline, use it. There is no bonus for putting your name on a report when anonymity is on the table.
- Stick to facts. Your report should read like a timeline. “John was clocked in from 8:00 to 8:45 AM on March 3, 4, and 5 but did not arrive until approximately 8:40 AM each day” is useful. “John is always late and doesn’t care about his job” is not.
- Keep copies of everything you submit, including confirmation numbers. If the situation escalates you will want a record of exactly what you reported and when.
- Document retaliation immediately. If you experience a demotion, schedule change, hostile treatment, or termination after reporting, write down the details and consult an employment attorney. Deadlines vary by statute, from 180 days under SOX to two or three years under the FLSA, so acting quickly matters.
The legal framework strongly favors people who report in good faith with documented evidence. The reports that fail are the ones filed from grudges, filed without records, or filed so late that the evidence trail has gone cold.