Fraud, Waste & Abuse — Timecard Fraud & Time Theft
A New Employee Discovers That Everyone on the Team Adds 30 Minutes to Their Daily Timecard Because “The System Is Slow and We Always Work a Bit Late Anyway.” The Manager Knows About It. Does the New Employee Go Along With It?
A real-timecard fraud and time theft compliance scenario — with three decision options and the right answer. Normalization is how team-level fraud persists. This scenario trains the moment it can be stopped.
Quick Answer
When a team practice of inflating timecard entries is openly tolerated by the manager, does a new employee have a compliance obligation — or does the manager’s tolerance make the practice acceptable?
The manager’s tolerance does not make the practice acceptable. Timecard inflation — recording more hours than actually worked — is time theft, a form of asset misappropriation, and a violation of most organizations’ codes of conduct and payroll integrity policies. The fact that it is normalized within the team, known to the manager, and framed as compensating for legitimate extra time does not change what is happening: employees are submitting inaccurate records, and the organization is paying for hours that weren’t worked. A new employee who adopts the practice inherits the compliance exposure along with the habit.
The Situation
A new project coordinator joins a consulting firm and starts her second week. During timecard submission, she notices that her colleagues all add 30 minutes to their daily hours. When she asks a colleague about it, the explanation is: “The project management system is slow and crashes sometimes — we lose time dealing with it. And we almost always stay a few minutes late anyway. It’s just how we make the timecards reflect reality.”
The manager is aware of it. He hasn’t said anything. The team treats it as a known arrangement. The new employee sometimes had to deal with the slow system. She doesn’t want to be the only one submitting accurate timecards — it might make her look like she’s working less than everyone else.
She also knows that the timecards flow directly into client billing. The 30 minutes per day per person adds up across the whole team.
What Should the New Employee Do?
Choice AGo along with the team practice. The manager knows about it. It genuinely does average out over time. Standing out as the only person not doing it would be awkward and might make her look less productive than everyone else.
Choice BSubmit only accurate timecards reflecting actual hours worked. Separately escalate the systemic issue — the slow system and the lost time it creates — through the appropriate channel so the organization can address it legitimately rather than through informal timecard inflation.
Choice CTalk to the manager privately before deciding. If he says it’s an approved practice she can participate. If he seems uncertain, she’ll just submit accurate timecards and leave it alone.
The Right Call
Choice B — Submit accurate timecards and escalate the systemic issue through the appropriate channel.
Choice A makes the new employee a participant in a timecard fraud scheme from her second week. The normalization, the manager’s tolerance, and the “it averages out” rationale are all classic features of team-level fraud that persist because new members adopt the norm. Choice C routes the question to a manager who has already demonstrated he is not exercising proper oversight — his informal tolerance is not compliance clearance. Asking him to formalize it puts him in a position where he must either expose the practice or endorse it. Neither is a compliance solution. Choice B is the clean path: accurate records and a legitimate escalation of the real underlying problem, which is a broken system that creates genuine lost time.
Why This Is Harder Than It Looks
Normalization is how team-level fraud persists — and new employees are the moment it can be interrupted.
The ACFE‘s research on occupational fraud consistently identifies normalized team behavior as one of the most significant enablers of ongoing fraud schemes. When a practice is “how we do things here” and is known to management, new employees face significant social pressure to adopt it. The new employee in this scenario is at the exact moment where the fraud either expands to include her or is interrupted. Most people adopt the norm. That’s why the norm continues.
“It averages out” is a rationalization, not an accounting principle.
Accurate timecards mean recording actual hours worked — not estimated hours, not hours that are roughly correct on average. If the slow system genuinely causes lost productive time, the correct response is to document and report that issue through legitimate channels so it can be addressed — a system fix, a billing adjustment, a rate negotiation. The informal timecard inflation bypasses organizational controls and creates inaccurate records, regardless of the underlying intent.
The client billing dimension makes this more serious than internal time theft.
In a consulting context, inflated timecards are reflected directly in client billing. The team isn’t only taking 30 minutes of employer time per day — they’re billing clients for 30 minutes of work that wasn’t performed. That moves the practice from internal time theft into potential contract fraud, which carries significantly more serious legal and reputational consequences for the organization and the individuals involved.
Frequently Asked Questions
Is timecard inflation fraud even when the amounts are small?
Yes. Recording more hours than actually worked is a form of asset misappropriation regardless of the amount per incident. Small amounts don’t change the nature of the conduct — they affect how it is discovered. Many significant fraud losses begin as small normalized amounts that grow over time. The ACFE consistently finds that small-amount asset misappropriation schemes are among the most persistent because they fall below the threshold that triggers oversight, allowing the behavior to continue unchallenged for extended periods.
What should an employee do when they discover a team-level fraud practice that is normalized and manager-tolerated?
Submit only accurate records themselves and report the practice through an appropriate channel — the compliance hotline, HR, or internal audit — rather than through the manager who is already tolerating it. The employee doesn’t need to accuse colleagues; they can report the practice as a systemic issue they’ve observed. The compliance function can investigate without the employee being identified as the source if anonymous reporting is available.
Does a manager’s knowledge of a fraudulent practice create legal exposure for the organization?
Yes — in multiple ways. A manager who is aware of timecard fraud and does nothing has failed their supervisory obligation and may be personally liable for facilitating the practice. If the timecards affect client billing, the organization may face contract fraud exposure. Managerial tolerance of fraud is not a defense — it is typically treated as a form of participation in any subsequent investigation or legal proceeding.
How to Use This Scenario in Training
Recommended for all employees — particularly effective in new employee onboarding training where new hires are most likely to encounter team-level norms and least likely to feel comfortable questioning them. In consulting and professional services organizations where timecards directly affect client billing, this scenario should be elevated to mandatory training for all billing staff. Most effective when paired with a clear explanation of the anonymous reporting channel.
This scenario demonstrates the normalization rationalization combined with social pressure from the Decision Readiness Engine™ — “everyone does it, the manager knows, standing out would be awkward.” Decision-ready employees recognize that inherited team norms require the same evaluation as individual decisions, and that adopting a fraudulent practice because it’s established doesn’t reduce personal compliance exposure.
More Fraud, Waste & Abuse Scenarios
|
The vendor name is right. The bank account is different. The manager approved it. |
Small quantities of inventory are being taken by a well-liked colleague for six months. |
Browse all fraud, waste, and abuse compliance training scenarios. |
Want Fraud Prevention Scenarios in Your Program?
Xcelus builds scenario-based fraud, waste, and abuse training covering timecard fraud, invoice fraud, asset misappropriation, and the normalization patterns that allow team-level schemes to persist unchallenged.
© 2005–2026 Xcelus LLC. All rights reserved. Scenario content is original work protected by copyright. You may link freely — reproduction or adaptation without written permission is prohibited.