Introduction

Attendance fraud is a serious employment issue in the Philippines because it directly concerns trust, honesty, company discipline, wage payment, and the integrity of workplace records. It usually arises when an employee is suspected of falsifying, manipulating, misrepresenting, or concealing facts about attendance, timekeeping, work hours, overtime, leave usage, or actual presence at work.

In Philippine employment, an employer generally cannot immediately dismiss an employee based only on suspicion. Even where the alleged misconduct appears obvious, the employer must still comply with due process. A central part of that process is the Notice to Explain, commonly called an NTE.

An NTE is not yet a penalty. It is a written notice informing the employee of the specific charge or accusation and giving the employee a real opportunity to answer. In attendance fraud cases, the NTE is often the first formal document in the disciplinary process.

Meaning of Attendance Fraud

Attendance fraud refers to dishonest conduct involving an employee’s attendance, work time, or timekeeping records. It may include any act where the employee causes the employer to believe that the employee was present, working, on official duty, or entitled to pay when that is allegedly untrue.

Common examples include:

Buddy punching One employee clocks in or clocks out for another employee.
Falsifying daily time records The employee records arrival, departure, break time, overtime, or fieldwork hours inaccurately.
Biometric manipulation The employee uses another person’s biometric access, circumvents the biometric system, or tampers with logs.
False overtime claims The employee claims overtime despite not actually rendering overtime work.
False fieldwork or work-from-home reporting The employee reports being on official field duty or working remotely while allegedly doing personal activities.
Misuse of official business or official time The employee represents that they are attending a work-related activity but are not actually doing so.
Leave fraud The employee gives false reasons, fabricated documents, or misleading information to obtain leave benefits.
Ghost attendance The employee is marked present despite being absent.
Manual correction abuse The employee submits false missed-log, correction, or attendance adjustment forms.
Time theft The employee receives pay for hours allegedly not worked.

Attendance fraud is treated seriously because it may involve dishonesty, loss of trust, falsification of company records, and unjust receipt of wages or benefits.

Legal Character of Attendance Fraud

Attendance fraud may fall under several recognized grounds for disciplinary action under Philippine labor law, depending on the facts.

1. Serious Misconduct

Serious misconduct refers to improper or wrongful conduct that is grave, work-related, and shows that the employee has become unfit to continue working for the employer.

Attendance fraud may be treated as serious misconduct when the act is intentional, dishonest, and directly connected with the employee’s work. For example, deliberately asking another employee to clock in on one’s behalf may be considered serious because it involves deception and abuse of company systems.

2. Willful Breach of Trust

For employees occupying positions of trust and confidence, attendance fraud may amount to willful breach of trust. This is especially relevant for supervisors, managers, payroll handlers, timekeepers, HR personnel, finance staff, field personnel, remote workers, security personnel, or employees whose work depends heavily on self-reporting.

The employer must generally show that the breach was willful, founded on clearly established facts, and related to the employee’s duties.

3. Fraud or Willful Breach of Company Rules

Attendance fraud may also violate company policies, codes of conduct, employee handbooks, timekeeping rules, payroll policies, overtime rules, or remote-work policies.

If the employer has a clear written rule prohibiting falsification of attendance, buddy punching, false overtime, or misrepresentation of work hours, the violation may support disciplinary action.

4. Gross and Habitual Neglect

In some cases, attendance issues may be treated as neglect rather than fraud. This applies where the issue involves repeated tardiness, absenteeism, failure to log attendance, or failure to follow attendance procedures. However, where deception is involved, the case is usually treated more seriously as dishonesty or fraud.

5. Analogous Causes

Some attendance fraud situations may be treated as analogous to recognized just causes, particularly where the conduct undermines the employment relationship.

Importance of the Notice to Explain

The NTE is important because Philippine labor law requires procedural due process before an employee may be dismissed for just cause.

For just-cause termination, the standard process generally involves:

First written notice This is the Notice to Explain. It informs the employee of the charge and gives an opportunity to respond.
Opportunity to be heard The employee must be allowed to submit a written explanation and, when required by circumstances or company rules, attend a hearing or conference.
Second written notice After evaluation, the employer issues a decision stating whether the employee is liable and what penalty is imposed.

The NTE is therefore the foundation of the disciplinary process. If it is vague, defective, or unfair, the employer’s disciplinary action may later be challenged.

Purpose of an NTE in Attendance Fraud Cases

An NTE serves several purposes:

To inform the employee of the accusation The employee must know what specific act is being charged.
To identify the rule allegedly violated The notice should refer to the company policy, code provision, employment contract clause, or lawful directive allegedly breached.
To give the employee a fair chance to explain The employee must be allowed to deny, admit, clarify, justify, or present evidence.
To preserve fairness in the investigation The NTE helps show that the employer did not prejudge the employee.
To create a written record In case of a labor complaint, the NTE becomes important evidence that the employer followed due process.

Essential Contents of a Valid NTE

A proper NTE for attendance fraud should contain the following:

1. Employee Information

The notice should identify the employee by name, position, department, and work location.

2. Date of Issuance

The date is important because it determines the deadline for the employee’s explanation.

3. Specific Acts Complained Of

The notice should clearly describe what the employee allegedly did. It should avoid vague accusations such as:

“You committed attendance fraud.”

That is insufficient by itself. A better charge would specify:

“On 3 May 2026, you allegedly recorded your time-in at 8:02 a.m. despite CCTV footage showing that you entered the premises only at around 10:47 a.m.”

The NTE should include relevant details such as:

Dates involved
Time entries involved
Attendance records questioned
Location
Names of other employees involved, if necessary
Documents or systems involved
Nature of the discrepancy
Amount of overtime, pay, or leave affected, if known

4. Rules or Policies Allegedly Violated

The NTE should cite relevant provisions from:

Employee handbook
Code of conduct
Timekeeping policy
Payroll policy
Remote-work policy
Overtime policy
Attendance policy
Employment contract
Company memoranda
Lawful management instructions

5. Possible Penalty

The NTE should inform the employee of the possible consequences, especially if dismissal is being considered. This allows the employee to appreciate the seriousness of the charge.

A typical phrase is:

“If proven, the above acts may constitute serious misconduct, dishonesty, fraud, willful breach of trust, violation of company policy, and/or other just causes for disciplinary action, which may result in penalties up to and including termination of employment.”

6. Directive to Submit Written Explanation

The employee should be directed to explain in writing why no disciplinary action should be imposed.

7. Reasonable Period to Answer

The employee must be given a reasonable time to respond. In practice, employers often give at least five calendar days, especially in cases where dismissal may be imposed.

8. Right to Submit Evidence

The NTE should tell the employee that they may attach supporting documents, names of witnesses, screenshots, logs, medical records, travel records, or other evidence.

9. Hearing or Conference Information

The NTE may either schedule a hearing or state that a hearing may be conducted after receipt of the explanation. A hearing is especially useful when the facts are disputed, the employee requests one, company policy requires it, or dismissal is possible.

10. Neutral Language

The NTE should not state that the employee is already guilty. It should use words such as “allegedly,” “appears,” “reported,” “subject to your explanation,” or “for your clarification.”

Common Defects in an NTE

An NTE may be defective if it:

Uses vague accusations without specific details.
Fails to identify the dates or attendance entries involved.
Does not cite any company rule or policy.
Does not give the employee enough time to answer.
States that the employee is already guilty.
Threatens immediate dismissal without investigation.
Fails to mention that dismissal is a possible penalty.
Does not allow the employee to present evidence.
Combines multiple unrelated charges without clarity.
Is issued only after the employer has already made a final decision.

A defective NTE does not automatically mean the employee is innocent, but it may expose the employer to liability for violation of procedural due process.

Evidence Commonly Used in Attendance Fraud Cases

Attendance fraud cases are highly evidence-driven. The employer should avoid relying solely on rumor or suspicion.

Common evidence includes:

1. Biometric Logs

These may show time-in and time-out records. However, logs should be interpreted carefully because system errors, failed scans, power interruptions, or manual adjustments may occur.

2. CCTV Footage

CCTV may be used to compare actual entry and exit times against attendance records.

3. Access Card Logs

Door access, turnstile, elevator, or building entry logs may help verify presence.

4. Payroll Records

Payroll records may show payment of regular hours, overtime, holiday work, night differential, or other benefits based on disputed attendance.

5. Overtime Authorization Forms

These may show whether overtime was approved and whether the work was actually rendered.

6. System Activity Logs

For remote or computer-based employees, login records, VPN logs, application usage, ticketing activity, chat timestamps, call logs, or task records may be relevant.

7. GPS or Field Reports

For field employees, trip logs, client confirmations, GPS records, delivery records, route logs, or official business forms may be relevant.

8. Witness Statements

Supervisors, guards, co-workers, clients, or HR personnel may provide statements.

9. Employee’s Own Admissions

Admissions in emails, chats, written explanations, or investigation conferences may be used, but they must be obtained fairly.

10. Manual Timekeeping Forms

Missed punch forms, attendance correction requests, official business forms, and leave forms may show inconsistencies or misrepresentations.

Role of Company Policy

Company policy is critical in attendance fraud cases. A clear policy helps establish that the employee knew the rule and understood the consequences.

A good attendance policy should cover:

Required timekeeping method
Prohibition on buddy punching
Prohibition on falsification of records
Procedure for missed logs
Rules on overtime approval
Rules on fieldwork
Rules on remote work
Break time and meal period rules
Consequences of violations
Documentation requirements
Authority of HR or management to audit records

Without a clear policy, the employer may still discipline dishonest conduct, but proving the fairness and proportionality of the penalty may become more difficult.

Attendance Fraud and Dismissal

Attendance fraud can justify dismissal when supported by substantial evidence and when the penalty is proportionate to the offense.

The employer must establish:

The employee committed the act.
The act was intentional or dishonest.
The act was work-related.
The act violated company policy or lawful standards of conduct.
The penalty is proportionate.
Procedural due process was observed.

Not every attendance irregularity justifies dismissal. A single missed log, honest mistake, system error, or misunderstanding may merit correction rather than termination. The key issue is usually whether there was fraud, dishonesty, or deliberate misrepresentation.

Substantial Evidence Standard

In labor cases, the employer does not need proof beyond reasonable doubt. The usual evidentiary standard is substantial evidence, meaning such relevant evidence as a reasonable mind might accept as adequate to support a conclusion.

For attendance fraud, substantial evidence may consist of a combination of time records, CCTV footage, access logs, witness statements, payroll documents, and the employee’s explanation.

The employer should avoid relying on bare allegations. The disciplinary decision should explain why the evidence supports the finding.

Employee Rights Upon Receiving an NTE

An employee who receives an NTE has several important rights:

Right to be informed of the charge The employee must know the specific accusation.
Right to reasonable time to respond The employee must be given sufficient time to prepare an explanation.
Right to submit evidence The employee may present documents, records, witnesses, screenshots, or explanations.
Right to be heard This may be through a written explanation, hearing, conference, or both.
Right against prejudgment The employer should not decide the penalty before receiving and evaluating the explanation.
Right to a written decision If discipline is imposed, the employee should receive a notice of decision stating the basis of the finding and penalty.

How an Employee Should Respond to an NTE

An employee should take an NTE seriously. The written explanation should be clear, factual, respectful, and supported by evidence.

A good response should:

Acknowledge receipt of the NTE.
Address each allegation one by one.
Admit only facts that are true.
Deny inaccurate allegations directly.
Explain context, system issues, emergencies, approvals, or misunderstandings.
Attach supporting documents.
Identify witnesses, if any.
Avoid emotional attacks.
Request copies of evidence if needed.
Request a hearing if the facts are disputed.

The employee should avoid ignoring the NTE. Failure to answer may be treated as waiver of the opportunity to explain, although the employer must still evaluate the available evidence fairly.

Preventive Suspension in Attendance Fraud Cases

In some attendance fraud cases, the employer may impose preventive suspension while the investigation is ongoing. Preventive suspension is not a penalty. It is a temporary measure used when the employee’s continued presence may pose a serious and imminent threat to the employer’s property, operations, records, witnesses, or investigation.

Preventive suspension may be considered where the employee:

Has access to timekeeping systems
Can alter attendance records
Can influence witnesses
Can interfere with the investigation
Holds a sensitive position involving payroll, HR, security, or records

Preventive suspension must be used carefully. It should not be imposed automatically in every attendance issue. It should be justified by the circumstances.

Distinction Between Attendance Fraud and Poor Attendance

Attendance fraud should not be confused with ordinary attendance violations.

Poor Attendance

This may include:

Absenteeism
Tardiness
Undertime
Failure to log in or log out
Excessive breaks
Failure to follow attendance procedures

These may be disciplinary issues, but they do not always involve dishonesty.

Attendance Fraud

This involves deception or misrepresentation, such as:

Recording false work hours
Asking someone else to clock in
Claiming overtime not worked
Submitting false fieldwork documents
Manipulating attendance systems

Attendance fraud is usually treated more severely because it attacks the trust relationship between employer and employee.

Attendance Fraud in Remote Work and Hybrid Work

Remote and hybrid work arrangements have made attendance fraud more complex. In Philippine workplaces, many companies now rely on digital tools, productivity systems, virtual meetings, VPN logs, project management platforms, and self-declared work hours.

Attendance fraud in remote work may include:

Logging in but not working
Claiming work hours while unavailable
Using automated tools to appear active
Misrepresenting location or availability
Submitting false task completion reports
Claiming overtime without actual work
Having another person perform work or access systems
Using company equipment for personal activity during declared work time

Employers should have clear remote-work policies. These should specify expectations on availability, timekeeping, productivity, reporting, data privacy, monitoring, overtime approval, and disciplinary consequences.

Data Privacy Considerations

Attendance investigations may involve personal data, including biometric data, CCTV footage, location logs, system activity, and communications. Employers must handle such data carefully.

The employer should generally observe these principles:

Collect only relevant data.
Use data for legitimate employment and disciplinary purposes.
Limit access to authorized personnel.
Avoid unnecessary disclosure.
Preserve confidentiality.
Retain records only as necessary.
Respect company privacy notices and policies.
Avoid excessive surveillance.

The use of biometric, CCTV, GPS, or system logs should be consistent with legitimate business purposes and applicable privacy rules.

Sample Structure of an NTE for Attendance Fraud

A properly structured NTE may look like this:

Subject: Notice to Explain – Alleged Attendance Fraud

Opening: This refers to certain attendance records and related documents concerning your reported attendance on specified dates.

Allegations: State the specific dates, time entries, and discrepancies.

Policy Violated: Identify the relevant company rules.

Possible Offense: State that the alleged act may constitute dishonesty, falsification, fraud, serious misconduct, willful breach of trust, or violation of company policy.

Directive: Require the employee to submit a written explanation within the given period.

Evidence: Mention that the employee may submit supporting evidence.

Hearing: State whether a hearing will be scheduled or may be requested.

Reservation: State that management will evaluate the explanation and evidence before deciding.

Sample NTE Language

Notice to Explain

This refers to your attendance records for 6 May 2026 and 7 May 2026.

Based on the initial review of the company’s biometric logs, access records, and CCTV footage, it appears that your attendance entries for the above dates may not accurately reflect your actual presence in the workplace. In particular, the records show that you were logged in at 8:03 a.m. on 6 May 2026, while access records and CCTV footage appear to indicate that you entered the premises at approximately 10:21 a.m. on the same date.

The above circumstances, if proven, may constitute dishonesty, falsification of company records, attendance fraud, serious misconduct, willful breach of trust, and violation of the company’s Code of Conduct and Attendance and Timekeeping Policy. These acts may warrant disciplinary action up to and including termination of employment.

You are hereby directed to submit your written explanation within five calendar days from receipt of this notice, explaining why no disciplinary action should be imposed upon you. You may attach any documents, records, messages, approvals, witness statements, or other evidence in support of your explanation.

After receipt of your explanation, the company may conduct an administrative hearing or conference if necessary. Failure to submit your explanation within the period given shall be deemed a waiver of your opportunity to submit a written explanation, and the company may proceed to evaluate the matter based on the available records.

Please be assured that no final determination has been made at this stage, and your explanation and evidence will be considered before any decision is issued.

Employer Best Practices

Employers should observe the following best practices:

Investigate before issuing the NTE.
State the allegations clearly and specifically.
Avoid conclusory accusations.
Attach or describe supporting records when appropriate.
Give reasonable time to answer.
Allow the employee to submit evidence.
Conduct a hearing when facts are disputed.
Keep the process confidential.
Avoid retaliation or humiliation.
Issue a reasoned written decision.
Apply penalties consistently.
Consider mitigating and aggravating circumstances.

Employee Defense Considerations

Employees accused of attendance fraud may raise several defenses depending on the facts:

System error in the biometric or timekeeping system.
Authorized manual correction.
Prior approval by a supervisor.
Emergency circumstances.
Mistaken identity.
Incomplete or misleading CCTV footage.
Failure of the employer to provide complete records.
Ambiguous company policy.
Lack of intent to defraud.
Honest mistake.
Inconsistent enforcement of rules.
Disproportionate penalty.

The strongest defense usually combines a factual explanation with documentary support.

Proportionality of Penalty

Even if an attendance violation occurred, the penalty must be proportionate. Dismissal is the most severe employment penalty and should generally be reserved for grave offenses.

Factors that may affect the penalty include:

Amount of time or pay involved
Number of incidents
Whether the act was intentional
Whether documents were falsified
Whether another employee was involved
Whether the employee benefited financially
Position of trust held by the employee
Length of service
Prior disciplinary record
Damage to the employer
Admission or remorse
Past enforcement practice of the company

A first-time minor attendance error may not justify dismissal. But deliberate falsification of attendance records, especially if repeated or involving payroll benefit, may justify severe discipline.

Attendance Fraud and Payroll Recovery

If attendance fraud caused overpayment of wages, overtime, allowances, or benefits, the employer may seek recovery subject to legal and procedural limits.

The employer should be careful with salary deductions. Deductions from wages are regulated and should not be done arbitrarily. It is safer for the employer to document the overpayment, obtain written acknowledgment where appropriate, and follow lawful procedures.

Payroll recovery should be treated separately from disciplinary liability. Even if the employer recovers the amount, the employee may still face discipline if dishonesty is proven.

Attendance Fraud Involving Multiple Employees

Some cases involve collusion, such as buddy punching or coordinated falsification. The employer should investigate each employee individually.

Each employee should receive their own NTE stating their specific alleged participation. The employer should avoid assuming that all employees are equally liable.

Possible roles include:

Employee who benefited from the false attendance
Employee who clocked in or out for another
Supervisor who approved false records
Timekeeper who altered logs
HR or payroll staff who processed questionable entries
Witnesses who helped conceal the conduct

Each person’s liability depends on evidence of participation, knowledge, intent, and benefit.

Attendance Fraud by Supervisors and Managers

Attendance fraud by supervisors, managers, HR staff, payroll staff, security personnel, or timekeepers is often treated more seriously because these employees are expected to uphold company rules.

A supervisor who falsifies their own attendance may commit dishonesty. A supervisor who knowingly approves false attendance records of subordinates may also be liable for abuse of authority, negligence, dishonesty, or breach of trust.

Management employees are generally held to a higher standard of trust and accountability.

NTE Versus Notice of Decision

The NTE and the Notice of Decision are different documents.

NTE

The NTE says:

These are the allegations.
These are the possible violations.
Explain your side.
No final decision has been made yet.

Notice of Decision

The Notice of Decision says:

The company reviewed the evidence.
The company considered the employee’s explanation.
The company finds the employee liable or not liable.
The company imposes a penalty, if any.
The decision takes effect on a specific date.

Employers should not combine the NTE and final decision in one document, because that suggests lack of due process.

Administrative Hearing

A hearing is not always a formal trial-type proceeding. It may be a conference where the employee is given an opportunity to explain, clarify, answer questions, and present evidence.

A hearing is particularly important when:

The employee denies the charge.
Facts are disputed.
Dismissal is possible.
Witness credibility matters.
The employee requests a hearing.
Company rules require one.
The evidence is technical or complex.

Minutes of the hearing should be prepared and signed or acknowledged when possible.

Burden on the Employer

The employer has the burden to prove that dismissal or discipline is valid. In attendance fraud cases, this means the employer must prove both the act and the basis for the penalty.

The employee does not have to prove innocence in the same way an accused person might in a criminal case. However, the employee should still answer the allegations because silence may allow the employer to rely on available evidence.

Criminal Aspect

Some attendance fraud cases may theoretically involve criminal issues such as falsification, estafa, or fraud, depending on the facts. However, most workplace attendance fraud cases are handled as administrative employment matters.

An employer should be careful before accusing an employee of a crime in an NTE. The safer approach is to describe the employment misconduct and company policy violations, unless the employer is prepared to pursue a separate criminal complaint.

Constructive Dismissal Risks

An employer may expose itself to constructive dismissal claims if, before completing the process, it humiliates the employee, removes duties without basis, forces resignation, blocks access without justification, announces guilt, or creates intolerable working conditions.

The employer should preserve neutrality during the investigation. Preventive suspension, if imposed, should be properly justified and documented.

Resignation During Investigation

An employee may resign while an attendance fraud investigation is pending. The employer should document whether the resignation is voluntary. The employer may still preserve records of the investigation, especially if there are payroll, property, or legal consequences.

The employer should not force resignation as a substitute for due process. Forced resignation may be treated as dismissal.

Settlement and Administrative Closure

Some attendance fraud cases are resolved through settlement, restitution, resignation, final pay adjustment, or administrative closure. Any settlement should be voluntary, written, and clear.

However, employers should be cautious when using quitclaims or waivers. These should not be used to conceal unlawful dismissal or pressure employees into giving up valid claims.

Practical Checklist for Employers

Before issuing an NTE for attendance fraud, the employer should ask:

What exact attendance entry is disputed?
What date and time are involved?
What records contradict the employee’s attendance?
What policy was violated?
Was the employee aware of the policy?
Is there evidence of intent to deceive?
Did the employee receive pay or benefit because of the entry?
Were other employees involved?
Is the evidence complete and reliable?
Is preventive suspension necessary?
Is dismissal a possible penalty?
Has the employee been given enough time to explain?

Practical Checklist for Employees

Upon receiving an NTE, the employee should ask:

What exactly am I being accused of?
What dates and time entries are involved?
What evidence does the employer have?
Are the records accurate?
Was there approval, system error, or emergency?
Are there documents that support my explanation?
Are there witnesses?
Did I receive pay for time not worked?
Is the policy clear?
Is the penalty proportionate?
Should I request a hearing?
Can I submit my explanation on time?

Model Employee Explanation Outline

An employee’s written explanation may follow this structure:

Opening Acknowledge receipt of the NTE.
General Response Deny or admit the charge clearly.
Point-by-Point Explanation Address each date, time entry, or allegation separately.
Supporting Facts Explain circumstances such as system error, prior approval, emergency, fieldwork, or actual work performed.
Evidence Attach screenshots, messages, approvals, medical records, logs, or witness names.
Good Faith Statement State that there was no intent to defraud, if true.
Request Request dismissal of the charge, reconsideration, or a hearing.
Closing Maintain a respectful tone.

Common Employer Mistakes

Employers often make avoidable mistakes in attendance fraud cases, such as:

Treating suspicion as proof.
Issuing a vague NTE.
Failing to preserve CCTV footage.
Ignoring the employee’s explanation.
Not checking system errors.
Applying rules inconsistently.
Using dismissal for minor first offenses.
Failing to document the investigation.
Announcing the accusation to other employees.
Making salary deductions without proper basis.
Forcing resignation.
Issuing the final decision too quickly without genuine evaluation.

Common Employee Mistakes

Employees also make mistakes, such as:

Ignoring the NTE.
Submitting an emotional but unsupported explanation.
Admitting facts carelessly.
Failing to attach documents.
Missing the deadline.
Blaming others without proof.
Altering or fabricating evidence.
Communicating threats or insults.
Failing to request records or hearing when necessary.
Assuming that a minor amount means the case is harmless.

Special Considerations for Probationary Employees

Probationary employees are still entitled to due process. If the alleged attendance fraud is treated as a just-cause offense, the employer should issue an NTE and follow procedural requirements.

However, if the issue concerns failure to meet reasonable standards made known at the time of engagement, the employer may proceed under probationary employment rules. The distinction matters. If the issue is dishonesty or fraud, it is safer to observe the just-cause disciplinary process.

Special Considerations for Rank-and-File Employees

For rank-and-file employees, the employer must show that the alleged attendance fraud was proven and that the penalty is justified. Length of service and prior record may be considered, but they do not automatically excuse dishonesty.

Special Considerations for Confidential Employees

Confidential employees, HR personnel, payroll staff, finance staff, timekeepers, and employees handling sensitive records may face stricter scrutiny because attendance fraud may directly affect trust.

Special Considerations for Field Employees

Field employees often work with less direct supervision. Attendance fraud allegations may involve client visits, travel time, delivery routes, sales calls, or official business forms.

Employers should distinguish between:

Failed client visit due to legitimate reasons
Route changes
Traffic or travel delays
Poor reporting
Actual false reporting

Clear fieldwork documentation rules are essential.

Special Considerations for BPO and Shift Work

In BPO, call center, security, manufacturing, logistics, healthcare, and other shift-based industries, attendance fraud may affect operations, staffing, client service levels, and payroll.

Common issues include:

False login time
Improper break manipulation
Unauthorized away-from-keyboard time
Schedule adherence manipulation
False overtime
Swapping shifts without approval
Proxy login
Manipulated productivity records

Because these industries often use multiple systems, employers should compare attendance records with production logs, call logs, badge access, and supervisor approvals.

Interaction With Company Code of Conduct

Many companies classify attendance fraud under offenses such as:

Dishonesty
Falsification of company records
Fraud
Unauthorized absence
Abuse of company time
Serious misconduct
Gross misconduct
Breach of trust
Payroll fraud
Violation of timekeeping procedure

The NTE should use the correct classification. Mislabeling the offense may create confusion but is not always fatal if the facts are clearly stated. Still, precise drafting is best.

Drafting Tips for NTEs

A well-drafted NTE should be:

Specific
Neutral
Evidence-based
Policy-based
Fair
Clear about the deadline
Clear about possible penalties
Free from insults or conclusions of guilt

Avoid phrases such as:

“You are guilty of attendance fraud.”

Use instead:

“It appears from the initial records that you may have inaccurately recorded your attendance.”

Avoid:

“You are hereby terminated unless you explain.”

Use instead:

“You are directed to explain why no disciplinary action should be imposed.”

The Role of Intent

Intent is often decisive. Attendance discrepancies can happen for innocent reasons. Fraud generally requires some form of deceit, intentional misrepresentation, or bad faith.

Evidence of intent may include:

Repeated suspicious entries
Coordination with another employee
False explanation
Altered documents
Concealment
Benefit from the false entry
Prior warnings
Clear contradiction between records and claims

Absence of intent may support a lesser penalty.

Mitigating Circumstances

The employer may consider mitigating circumstances, such as:

First offense
Short period involved
No financial loss
Honest mistake
System confusion
Lack of training
Ambiguous policy
Immediate admission
Voluntary correction
Long service
Good record

However, mitigating circumstances do not automatically erase liability.

Aggravating Circumstances

The employer may consider aggravating circumstances, such as:

Repetition
Financial gain
Falsified documents
Involvement of others
Position of trust
Prior warnings
Cover-up
Refusal to cooperate
Damage to client or operations
Manipulation of official systems

Aggravating circumstances may justify a heavier penalty.

Final Decision After the NTE

After receiving the employee’s explanation and conducting any necessary hearing, the employer should issue a written decision.

The decision should state:

The charge.
The facts established.
The evidence considered.
The employee’s explanation.
Why the explanation was accepted or rejected.
The policy violated.
The penalty imposed.
Effective date of the penalty.

The decision should not merely say:

“Your explanation is unsatisfactory.”

It should explain why.

Possible Penalties

Depending on the facts and company policy, penalties may include:

Verbal warning
Written warning
Reprimand
Suspension
Loss of attendance-related incentive
Disallowance of improper overtime claim
Restitution or correction of payroll, where lawful
Demotion, if allowed and justified
Final warning
Termination of employment

The penalty must match the gravity of the offense.

Attendance Fraud and Final Pay

If the employee is dismissed, final pay should still be processed according to applicable rules. The employer should be cautious in withholding final pay. Any deductions or set-offs should have a lawful basis and proper documentation.

A pending attendance fraud case does not automatically justify indefinite withholding of all final pay.

Unionized Workplaces

In unionized workplaces, the collective bargaining agreement may contain additional rules on discipline, investigation, representation, hearings, grievance procedure, and penalties.

The employer should comply with both labor law due process and the CBA. The employee may request union assistance if allowed by the CBA or company rules.

NTE in Government Versus Private Employment

This article concerns private employment in the Philippine labor context. Government employees are generally governed by civil service rules, which have their own administrative disciplinary procedures. While similar fairness principles may apply, the specific process and terminology may differ.

Key Takeaways

A Notice to Explain for attendance fraud is a crucial due process document in Philippine employment. It must clearly inform the employee of the specific attendance-related misconduct alleged, the rules violated, the possible consequences, and the opportunity to respond.

Attendance fraud may justify severe discipline, including dismissal, when there is substantial evidence of intentional dishonesty, falsification, or breach of trust. However, employers must distinguish fraud from ordinary attendance mistakes, system errors, poor attendance, or negligence.

For employers, the best protection is a fair, documented, evidence-based process. For employees, the best response is a timely, factual, and evidence-supported explanation.