How GPS Geofencing Eliminates Time Clock Fraud
Time clock fraud is one of the most common — and most expensive — forms of employee theft. Whether it's buddy punching (clocking in for a coworker), phantom hours (claiming to work from home when you're at the beach), or inflated overtime, the costs add up fast.
A study by the American Payroll Association found that time theft affects approximately 75% of businesses, costing an average of 4.5 hours per week per employee in "buddy punched" or inflated hours. For a 20-employee company paying $15/hour, that's $2,700 per week — or $140,000 annually.
What is GPS Geofencing?
GPS geofencing creates a virtual perimeter around a physical location (your office, warehouse, or store). When an employee tries to clock in, their device's GPS coordinates are checked against the geofence. If they're outside the perimeter, the clock-in is blocked.
CoreIsle takes this a step further with three layers of fraud prevention:
Layer 1: Geofence Radius Verification
Each company location has a configured latitude, longitude, and radius (in meters). When an employee clocks in, CoreIsle calculates the great-circle distance between the employee's GPS position and the geofence center using the Haversine formula. If the distance exceeds the radius, the clock-in is blocked.
Layer 2: GPS Accuracy Threshold
Mobile GPS can be inaccurate — especially indoors or in urban canyons. But suspiciously *accurate* readings (e.g., 0m or 1m accuracy) are a red flag for GPS spoofing apps, which often hardcode impossibly precise values.
CoreIsle rejects clock-ins where:
- GPS accuracy is worse than 100m (employee should step outside or connect to Wi-Fi)
- GPS accuracy is better than 5m (likely a spoofed location)
Layer 3: IP Address Cross-Reference
CoreIsle cross-references the employee's GPS location with their IP address geolocation. If the IP country doesn't match the company's country, the clock-in is flagged with a `geo_anomaly: true` flag for manager review.
This catches VPN-based spoofing attempts where an employee uses a VPN to appear in a different location.
What Happens When Fraud is Detected?
When a clock-in fails the geofence check, the employee sees a clear error message:
"Geofence Violation: You are 340 meters away from the nearest authorized zone. You must be on-premises."
The attempted clock-in is logged (with the GPS coordinates and distance) so managers can review patterns of attempted fraud.
Real-World Impact
After implementing GPS geofencing, one Barbadian logistics company with 35 drivers saw:
- 92% reduction in overtime claims (phantom hours eliminated)
- 100% elimination of buddy punching
- $8,400/month in recovered labor costs
The ROI was immediate — the company saves more in one month than the annual CoreIsle subscription costs.
Privacy Considerations
CoreIsle only checks GPS coordinates at the moment of clock-in and clock-out. It does NOT:
- Track employee location throughout the day
- Store GPS history beyond the clock-in record
- Share location data with third parties
The GPS data is stored as metadata on the time entry record, visible only to HR and Owner roles.
Conclusion
GPS geofencing is the single most effective fraud prevention measure for time-based payroll. Combined with CoreIsle's automatic overtime calculation and manager approval workflows, it creates a tamper-proof time tracking system that pays for itself.
Start your free trial and set up your geofences in under 5 minutes.