How do cheaters use second devices to bypass online proctoring?
Why the second device is so effective
Webcam proctoring sees a cone: the face, maybe the hands, and the screen through screen-sharing. Everything outside that cone is invisible, and a phone lying on a lap or propped beside the keyboard lives entirely outside it. The cheater glances down, types with one hand, and the proctor sees normal test-taking behavior.
The device does not even need to be sophisticated. A second phone with a messaging app connects the test-taker to a helper who receives photos of questions and replies with answers. A smartwatch can do the same job more discreetly. The barrier to entry is owning a phone, which is everyone.
Audio is the weak point of most setups. Helpers dictate answers over earbuds, or the test-taker listens to recorded explanations. Microphone monitoring catches the careless, but a low volume earbud under hair defeats it completely.
Detection approaches and their limits
Room scans help at the start: a 360-degree phone sweep of the testing area before the exam begins. But scans are a moment in time. A device can be brought in after the scan, and determined cheaters stage the room specifically to pass the inspection.
Network analysis catches some cases. If the test-taker's network shows a second device active during the exam, especially one exchanging messages, that is strong evidence. But it requires network-level visibility the proctoring tool may not have, and mobile data bypasses the local network entirely.
Behavioral signals are the subtlest layer. Test-takers using a second device show distinctive patterns: gaze dropping below the screen at regular intervals, typing rhythms that do not match the answer being entered, and answer timing that correlates with message notifications. No single signal proves cheating, but the combination is persuasive.
What actually raises the cost
The most effective counter is exam design. Questions that require applying concepts to novel scenarios are hard to outsource to a helper in real time, while questions with searchable answers are trivially defeated. Time pressure helps too: a helper pipeline adds latency, and tight per-question timers make the round trip impractical.
Randomized question pools and parameterized variants mean the helper cannot pre-answer the exam. If every test-taker gets a different version, the cheating service has to solve each one live, which does not scale.
For high-stakes exams, environment controls still matter: locked-down browsers, secondary camera angles via a phone stand showing the workspace, and live proctors trained to watch for the behavioral tells. No single measure is enough; the layers multiply the cheater's effort until honest preparation is easier.
The policy side
Clear rules with real consequences change the calculation. When test-takers know that a second device means disqualification and understand how the detection works at a high level, the casual cheaters drop out. The policy has to be visible before the exam, not buried in terms of service.
Appeals need a fair process. Behavioral evidence is probabilistic, and false accusations destroy trust in the assessment. Flag, review with a human, and decide with multiple signals, never one.
Can proctoring software detect a phone on the desk?
Not reliably through the webcam alone. Some tools analyze screen reflections or use audio cues, but a phone kept out of frame is invisible to the primary camera. This is why high-stakes programs add a second camera angle or require the testing area to be visible.
Does banning phones from the room work?
Only if you can verify it. Test-takers can claim the phone is in another room while it sits in a pocket. Verification requires either trust or inspection, and remote inspection has hard limits. Design the exam so the phone does not help, rather than betting everything on its absence.
Are second-device cheaters usually caught?
The careless ones are. The careful ones, with good operational security and a fast helper, are hard to catch with technology alone. That is why the strongest programs combine detection with exam design that makes real-time help ineffective.