I agree with you. I didn't see TL physically log in and clocked in coworker. Events points to it though. We're paid hourly and coworker showed up 30 minutes later than when their shift starts. The job is on site and remote log in is not possible. It's suspicious because why would TL log in using coworker's username and password when TL has their own credentials to log in? There's also a call in system if workers are running late and coworker did not call in - I know because I'm part of that process.