Invoice line · W-0877
48.0
/
45.5
hours claimed
at the terminal
Hold needed
2.5 h over the terminal · £75 held
£1,365 approved
Pay run: Friday
Next check: week 43
Verify Every Labour Claim Before Payroll Runs.
Biometric site attendance at the terminal, matched line by line to every subcontractor invoice. Only verified labour gets paid.
- £9,000saved a week on our average site
- 5%of labour spend saved
- 14 daysfrom delivery to live
Built for every trade on site
- Groundworks
- Steel frame
- Drylining
- Scaffolding
- Brickwork
- M&E
- Roofing
- Civils
Real-time claim checking
From the terminal scan to the pay run, matched automatically
Don’t Approve What You Can’t Prove.
- £9,0001Saved a week on our average site
- £1.4bn2Estimated UK exposure a year
- 14 daysTypical time to go live
1 Average across PayRoll Protect sites: £180,000 of labour a week, 40 workers. 2 An estimate: £82bn of UK construction payroll at a 1.7% fraud rate. Sources include ONS, CIPP and HMRC.
Watch · 1:32
PayRoll Protect, Explained.
A minute and a half on how it works. Each chapter can take you to the part of the page that shows it, then back to the film.
01The £1.4bn problem
See the numbersRead the transcript
An estimated £1.4 billion every year in the UK construction market falls to fraudulent financial activity. PayRoll Protect is here to stop it, by verifying 100% of your workforce, daily.
Because every subcontractor invoice is a claim. Most are checked against paper registers and spreadsheets, if they’re checked at all. And at summary level, the numbers always look right.
Ghost workers who never scan at the terminal. Hours that outrun the shift. One person clocking in for another. Each one hides inside a total that looks right.
PayRoll Protect puts a face-scanning terminal on site. Every worker clocks in and out with their face. No cards, no apps, no proxy sign-ins.
Setup is simple. The terminal arrives pre-configured and mounts at site entry. We install a Starlink dish so the terminal never relies on site Wi-Fi or mobile signal. Workers enrol on their first day with nothing to download, and most sites are live within two weeks. And if the link ever drops, scans queue on the terminal and sync the moment it’s back.
Then every line of every labour invoice is matched against the terminal record. Anything without a scan behind it is held for query before payroll runs.
Verify, match, pay. PayRoll Protect. Don’t approve what you can’t prove. Book your 90-day pilot today.
The gap
Every Subcontractor Invoice Is a Claim.
Most are checked against paper registers and spreadsheets, if they are checked at all. At summary level, the numbers always look right.
One site · one week · summary view
Zoomed to the last 5% of hours
Claimed
1,840.0 h
At the terminal
1,808.5 h
£1,008this week
31.5 hours with no terminal record behind them. About £52,000 a year, on one site.
Illustrative: 46 workers, five days, £32 an hour, 1.7% of claimed hours unverified, which is the sector estimate.
Line-by-line matching
Every Line, Matched to the Terminal.
One subcontractor’s weekly invoice, checked worker by worker against the terminal record.
Verified£8,952
Held for query£1,039
8 of 8 lines checked · £9,991 claimed
- W-0412Groundworks · 42.0 hVerified
- W-0877Brickwork · 48.0 h2.5 h over the terminal£75 held
- W-1034M&E · 40.0 hVerified
- W-1188Labourer · 40.0 hNo terminal scan all week£880 held
- W-0655Scaffolding · 45.0 hVerified
- W-0903Carpentry · 44.0 hVerified
- W-0348Plastering · 50.0 hLeft 15:00 on Friday£84 held
- W-1120Dry lining · 38.0 hVerified
Illustrative invoice. Rates and hours are examples.
Where money goes
Three Leaks. One Record Closes Them.
Each one hides inside a total that looks right. Each one fails the same test: no terminal record, no payment.
01
Ghost Workers
Names on the invoice that never scanned at the terminal: fake, absent or duplicated.
Caught by no scan on the billed day.
02
Inflated Hours
Claims that outrun the shift: extended hours, padded overtime, wrong start times.
Caught by clock-out records that contradict the claim.
03
Proxy Clocking
One person signing in for another: buddy clocking, shared cards, unsupervised check-ins.
Caught by two scans for one identity at the same moment.
The numbers
The Cost of Trusting the Invoice.
On an average PayRoll Protect site we save £9,000 a week, in labour claims with no record behind them. Across the UK, an estimated £1.4bn of construction payroll is exposed to fraud every year.
Our average site
Measured£9,000saved every week
- Weekly labour spend
- £180,000
- Workers on site
- 40
- Saved a year
- £468,000
Share of weekly labour spend
Nearly three times the national estimate.
Across the UK
- UK construction payroll
- £82bn
- Estimated payroll fraud rate
- 1.7%
- Exposed every year
- £1.4bn
What Is Your Exposure?
Set your weekly subcontract labour spend. We apply 5%, what our sites save on average.
Estimates only. The UK sector estimate is 1.7% (sources include ONS, CIPP, HMRC and UK construction crime reporting); the full calculator lets you compare.
£180,000
Every month£39,000
Every year£468,000
That is £1,800 every working day.
How it works
From Terminal Scan to Approved Payment.
- 01
Worker Verified
Identity confirmed at a fixed device on site entry: face or fingerprint, with GPS location. No cards, PINs or proxy sign-ins.
- 02
Hours Captured
In and out times recorded per worker, per day. Works offline and syncs when the connection returns.
- 03
Invoice Checked
Every claimed line is compared against the verified attendance record.
- 04
Exceptions Raised
Anything without a matching record is flagged before payroll, grouped by type.
- 05
Payment Released
Only verified labour is paid. Every payment carries its evidence.
Sits alongside your existing payroll and timekeeping. Export, reconcile, keep what works.
Every scan leaves the terminal…
…straight up to orbit.
Installation
Any Terminal. Online by Satellite.
Every terminal connects over Starlink satellite internet, so it never depends on site Wi-Fi or a mobile signal.
Connected by
- 01Mounted at Site Entry
Arrives pre-configured, ready to fix where every worker passes.
- 02Online by Starlink
The dish gives the terminal its own connection, independent of the site office.
- 03Every Scan, Sent
Each check-in goes straight to UK-based servers, ready to match against the invoice.
- 04Offline, Still Recording
If the link drops, scans queue on the terminal and sync when it returns.
The pilot
Start With 90 Days. No Commitment.
Pre-configured hardware, full onboarding and expert support. You see live-site results before you decide anything.
At £180,000 a week of labour spend and the 5% our sites save on average, from go-live on day 14. Change the spend
Estimate: nothing is held until the site goes live on day 14. From then about £9,000 a week is held for query, reaching about £97,714 by day 90.
- Day 0Hardware Arrives
Pre-configured and ready to mount at site entry.
- Day 1Workers Enrol
At the terminal, on arrival. Nothing to install.
- Day 14Live on Site
Most sites are live within two weeks.
- Days 14–90Evidence Builds
Live-site results, with every saving documented and costed.
- Day 90Decide on the Evidence
Keep it if the numbers make the case. No commitment.
Governance
Biometric Data, Handled Properly.
Attendance evidence is only worth something if it is collected lawfully and kept safe.
Consent
Given at onboarding. A Data Processing Agreement is provided.
Biometric template
Encrypted and stored on UK-based servers
Deleted at contract end
Third parties
Never shared
Or deleted earlier on request, at any point.
FAQ
Questions Finance Teams Ask First.
A fixed device at site entry records each arrival and departure against a registered biometric profile, face or fingerprint. No paper registers, swipe cards or proxy sign-ins.
No. It sits alongside them as a verification layer. Attendance data exports and reconciles with what you already run.
Yes. The hours on each subcontractor timesheet or labour invoice are matched, worker by worker, against the biometric terminal record. Anything without a record behind it is held for query before payroll runs.
Templates are encrypted and held on UK-based servers, never shared with third parties, and deleted on request or at contract end. Workers give consent at onboarding and a Data Processing Agreement is available.
Most sites go live within about two weeks. Hardware arrives pre-configured and workers enrol on arrival.
Compliance is set at contract level, usually as a condition of site access. A worker who does not check in is not counted as present, and is not invoiced for.
No. Check-in happens at a fixed device. Workers install nothing.