The direct answer (AEO)
Proxy clock-in happens when an employee clocks in away from the assigned work location — or when a coworker punches for them. Prevention requires geofence-validated mobile clock-in, device-bound employee sessions, and GPS trails that managers can audit before payroll.
Proxy clock-in scenarios
| Scenario | Control |
|---|---|
| Clock from parking lot | Tighter geofence on building |
| Clock from home | Block outside all job fences |
| Coworker punches for late peer | Individual device session + optional biometric |
| Supervisor "fixes" timesheet | Approval audit + route replay |
Implementation
1. Disable shared kiosk PINs
2. Polygon geofences per job template
3. Flag attempts outside fence with distance offset
4. Weekly sample route replay audits