Time theft
Time theft is a name for recorded hours that were not worked: a punch for someone else, a start time earlier than the arrival, or a break that was paid and not taken. It is not a statutory category. It is a problem with the record.
What a clock can show
Shiftbrook’s clock-in compares the phone with the pin on the site at the moment of the punch. The default radius is 100 metres. The phone is not followed between clock-in and clock-out. If two people are both inside the circle, one of them can punch on the other’s phone. The product does not take a photo and it does not scan a face, so it cannot prove who was holding the handset. A punch from outside the radius is refused, or flagged if the organisation allows an outside punch with a reason.
A manager can add a manual time. That entry needs a note and is stored as flagged. The flag is a mark for the timesheet, not a finding that anyone stole time. Buddy punching is the specific case of one person clocking in for another. The limit is the same there: the account, the time, and whether the phone was inside the circle.
What you do with the hours
The timesheet is the place to correct a day before it is approved. Hours can come from the clock or from the rota. Once the sheet is approved it locks. Declining it, or editing the day, is how a wrong start comes off the record. The approved CSV is what you hand to payroll. Nothing in the clock decides that a pattern is dishonest. A short day and a long day are both just hours until a person looks at them.
Inflating hours can also pull a pay calculation around, but Shiftbrook does not calculate pay, so it cannot show a monetary loss. If you are checking the minimum wage, use the hours that were actually worked, not a punch that a manager has already rejected. Keep the note on the manual edit. That note is the audit, not a score.