Does the system detect spoof attendance?

Can an employee or employee’s friend mark attendance using a photo?

To avoid such a situation you can activate the ‘blink eyes’ rule.
We call it liveliness validation. It requires employees to walk towards the kiosk, show their face and blink eyes to register attendance.
You can set this up in attendance configuration in the following steps from the Web Dashboard.
Go to Settings > Attendance Settings.
Now in Liveliness Check, Enable option “Take Attendance when user shows face and blink eyes”.