It's management's responsibility to have enough of a clue to look at their employees and determine that they're gaming the system. If they can't do that, then they shouldn't be management.