Pencil whipping: why temperature logs get faked, and what it costs when an inspector notices
By Vimal Bhaya, Founder and Lead Systems Architect · Last reviewed 21 October 2026
This is part of Temperature logs and inspections, a short tutorial on temperature logs that stand up to an inspector.
Pencil whipping is filling in a temperature log without taking the readings. A whole day gets written at once, a safe number goes in instead of the real one, or the target printed on the form is copied into the boxes. It is common, it leaves marks you can see, and once an inspector spots it, the log works against you.
Below is one whole Sunday of a real kitchen's paper log, with identifying details removed for privacy. We read it the way a police handwriting examiner would, and it gives itself away. Every row was written left to right in one go. A walk-in cooler reads 36.4°F (2.4°C) at five checks out of six. And in 20 hours, nothing went wrong that was worth a note.
Pencil whipping means writing down readings nobody took
Pencil whipping means signing off a check that was never done. On a temperature log, it takes a few common forms:
- The end-of-shift fill. Every box for the whole day, written in one sitting.
- The catch-up. Days or weeks of blanks, filled in before an audit or an inspection.
- The safe number. A reading that looks right, written instead of the one on the thermometer.
- The copied target. The number printed on the form, written in as if it were a reading.
- The borrowed initials. One person signing for rounds they were not there for.
Staff talk about it openly. These lines come from our own research into public discussions by kitchen and store staff:
"When I got there I was told it wasn't necessary to fill out temperature logs, just fill in numbers that are in range. No one ever checks."
r/Butchery
"They're ignored for weeks and months at a time before being filled out en masse."
r/KitchenConfidential
"I just found out my boss has been having people forge our temp logs"
r/subway, thread title
Exhibit A: one whole Sunday, written one row at a time
This is a real equipment temperature log from one quick-service kitchen. The form asks for a check every 4 hours, around the clock: at 3, 7 and 11 AM and 3, 7 and 11 PM. We have six of its daily sheets, Saturday to Thursday. Here is Sunday's, whole.
For privacy, we have removed the equipment names, the staff initials, the manager's name and signature, the kitchen and the date. The Equip 1 to Equip 22 labels are ours, one per printed row. Every number is as it was written.
Handwriting examiners have one habit worth borrowing: work out the order the page was written in. We are not handwriting examiners. We borrowed the habit, and a strong coffee. Here is what the sheet says about itself.
- Each row was written left to right, in one go. An honest log fills top to bottom: at 3 AM, one person walks to every box and fills one column, then nothing happens until 7 AM. On this sheet, each row keeps one size, one slant and one height across all six columns, like a single line of writing. Six visits spread over twenty hours rarely write that evenly.
- The same slip, six times. Freezer numbers, around -18, sit mostly in Equip 4's row, and Equip 4 is a fridge, set for 40°F (4°C). They sit at the same height in all six columns. Making that slip at six visits hours apart takes real commitment. A pen sliding along one row only has to make it once.
- A favorite number. 36.4 turns up 14 times in the 42 readings set for 40°F (4°C), and at five of Equip 1's six checks. In our line of work, we call that a suspect with a habit.
- The evening repeats the morning. Equip 14 reads 36.4, then 37.1 at 3 and 7 AM, and 36.4, then 37.1 at 3 and 7 PM. Equip 18 does the same with 36.9 and 37.1.
- No witnesses. Twenty hours, twenty-two pieces of equipment, and not one comment or action written down.
- One person, twenty hours. The same initials sit in all six boxes, from 3 AM to 11 PM. Either one very dedicated employee, or one pen.
A good examiner never says a page proves anything. The phrase is "consistent with". So: this sheet is consistent with being written in a sitting, not over six rounds. Any one number on it could still be true. What the sheet cannot do is show that anyone opened a door at 3 AM, and that is the whole problem with paper.
Exhibit B: the same habits show up on the other days
The other days read the same way. These close-ups are number strips cut from the sheets, with the form's wording removed too.
Put the two exhibits together and you have six signs of a log written without a thermometer. They work on any log, including your own.
| Sign | On these six sheets | What real readings do |
|---|---|---|
| Written across, not down | Each row runs left to right in one hand. One freezer's numbers sit in a fridge's row, at the same height, in all six columns | Rounds hours apart fill a sheet one column at a time, and the writing changes from round to round |
| The same number, check after check | Sunday's walk-in cooler reads 36.4°F (2.4°C) at five of six checks | Air moves with every cooling cycle and every open door. A healthy restaurant reach-in swings about 5°F (3°C), about twice an hour |
| A pattern that repeats | Saturday's undercounter fridge reads 38, 37, 38 in the morning, then 38, 37, 38 again in the evening | Readings taken 4 hours apart do not fall in step |
| The label, not the box | Freezers read about -18 at nearly every check, under a label that says 0°F/-18°C | A freezer's air warms 8°F to 10°F (4°C to 6°C) during each defrost, a few times a day |
| One person at every check | On Sunday, the same initials sit in all six boxes, from 3 AM to 11 PM | That is a 20-hour day. Real logs change hands at shift change |
| Nothing ever goes wrong | No reading is out of range in six days. The comment and action columns are empty, and the form's code for "in defrost" is never used | Even a healthy reach-in peaked at about 43°F (6°C) twice in one day's service |
The freezer numbers raise one more question. The same sheets record the thermometer's ice-water check as 32.4, so the thermometer reads in Fahrenheit. Either the freezers ran near -18°F (-28°C) at every check for six days, or the number came off the label, where -18 is the Celsius figure. A walk-in freezer system is often sized for 0°F to -20°F (-18°C to -29°C), as how a walk-in freezer works explains, so the first is possible. Only the second explains why the numbers never stray far from -18.
One reading does stray. Sunday's 11 PM freezer check says -8. Either it is a -18 that lost its 1, or it is the warmest freezer reading in six days, with nothing written beside it. The examiner in us would like a word with whoever wrote it.
Staff fake logs when the checks do not fit the shift
Pencil whipping is rarely laziness alone. A log asks a lot of a busy shift, and the numbers add up fast.
| Kitchen | Checks a day | Readings a day | Time a day |
|---|---|---|---|
| 5 coolers and freezers, at opening and closing | 2 | 10 | About 10 minutes |
| 10 units, every 4 hours around the clock, like these sheets | 6 | 60 | About 1 hour |
| 15 units, every 3 hours around the clock | 8 | 120 | About 2 hours |
Each round means walking to every box, opening it, waiting for the thermometer, reading and writing. It lands in the middle of orders, deliveries, cleaning and breaks. Then the reasons pile up:
- The round competes with service. When a rush and a check land together, the rush wins, and the check gets written in later.
- Nobody reads the log. "No one ever checks" is the reason given in the butcher's thread above.
- A bad number makes work. A high reading means moving food, chilling it or throwing it out, calling a technician and explaining. A safe number makes none of that.
- Honest mistakes get punished. One store worker's thread is titled "Disciplinary for incorrectly inputting a delivery temperature log". A barista asks, "forgot to log fridge temps at close am i cooked?"
- Sometimes the boss asks for it. That is the Subway thread above, and a Whole Foods thread titled "Forged logs, speak up".
In a thread about automatic temperature logging, one restaurant worker put the other side plainly:
"Faking happens often. Sometimes a door's left cracked for a couple hours, the food is still at a good temp, and actions have been taken, but the logs will show a deficiency."
r/KitchenConfidential
That fudge hides a problem that was fixed. The same habit also hides the ones that were not.
The rules ask for the actual reading, written when it was taken
The FDA Food Code is the model code that state and local food rules in the US are built on. It makes the person in charge responsible for "daily oversight of the employees' routine monitoring of food temperatures" (2-103.11). It also requires the person in charge to give the inspector the records the Code calls for (8-402.11).
Where federal rules require a written log, they spell out exactly what pencil whipping breaks:
- Food plants under FDA preventive controls must record "the actual values and observations obtained during monitoring", created "concurrently with performance of the activity documented", with the initials of the person who did it (21 CFR 117.305).
- Meat and poultry plants under USDA must make each entry "at the time the specific event occurs" (9 CFR 417.5).
- Seafood and juice plants must enter information on records "at the time that it is observed" (21 CFR 123.9 and 120.12).
A back-filled entry fails the timing rule. A copied target fails the actual-value rule. A restaurant is not under these federal rules, but they say plainly what any reader of a log relies on: the number was read, by that person, at that time.
In Canada, the CFIA asks the same of records under a preventive control plan: an entry made "at the time that the specific event occurred", that is "legible, permanent and accurately reflects the actual event".
Once an inspector spots it, the log becomes evidence against you
An inspector reads a log against what they can see in front of them. A pencil-whipped log tends to fail in a few easy ways:
- The future is already filled in. The 3 PM box is full at 1 PM.
- The log disagrees with the thermometer. The log shows 37°F (3°C) all morning, and the food in the box probes at 46°F (8°C) at noon. Food warms slowly, so it did not get there in an hour.
- The pattern is too clean. The signs in the table above.
What it costs is more than the log:
- The food you cannot vouch for. School kitchen guidance says to throw cold food out if you cannot tell how long it was above 41°F (5°C). A log nobody believes cannot tell you how long.
- Your other records. An inspector who finds one made-up log has reason to doubt the cooling, receiving and cleaning logs next to it.
- The failure you never saw. A reach-in in our records spent about 30% of 28 days above 41°F (5°C), in long flat stretches of 8 hours to almost 2 days, at least one of them a door left ajar. A log that says 38 every time would never have shown it. The readings are on reach-in cooler troubleshooting.
- Your people. Staff asked to fake logs know it is wrong. That is how a thread ends up titled "Forged logs, speak up".
Fewer checks, a daily read and a sensor stop pencil whipping
- Ask for checks the shift can really do. Match the rounds to the staff on duty. Two real checks beat six invented ones.
- Read the log every day, and sign it. The person in charge reads it before the shift ends, chases blanks, and asks about any reading that never moves.
- Take your own reading now and then. A manager's spot check with a second thermometer, held against the log, is the simplest test there is.
- Make a high reading safe to write. Give it a column for what was done, and thank the person who wrote it. Discipline the made-up number, never the honest high one.
- Let a sensor take the readings nobody can. A monitor records every box all night and every weekend, so the 3 AM round can go.
Who should do each part is set out in who is responsible for temperature logs, and what a correct entry looks like in how to do temperature logs correctly.
TemperatureWise takes the readings no shift has time for
TemperatureWise records every cooler and freezer at least every 15 minutes, day and night, and keeps the record indefinitely. A recorded reading cannot be copied off a label or written in at the end of a shift.
When a box drifts from its normal pattern, TemperatureWise emails, then texts and calls up to 3 people per sensor until someone answers. A door left ajar at closing gets found that night, not at opening.
It does not do everything. TemperatureWise measures the air where the sensor sits, not the food, so staff still probe food when they cook, cool and receive it. Your health department may still ask for some hand checks. And someone still has to write down what was done when a box goes out of range.