The ExamFence Blog

Bots, answered.

The questions online assessment teams actually ask about automated abuse - answered directly, with the mechanics that matter.

How can proctors detect an off camera helper during a remote exam?

The oldest remote exam cheat needs no technology: a knowledgeable person sits just outside the camera frame and feeds answers. Detection relies on timing, gaze, audio, and answer pattern evidence combined, not any single signal.

How do exam programs verify identity without excluding honest candidates?

Identity verification stops proxy test takers, but document checks, biometrics, and name matching all fail honest candidates in predictable ways. Good programs verify firmly and recover gracefully.

How should testing programs secure an exam item bank before launch day?

An item bank is the exam before the exam exists: thousands of questions whose value vanishes if they leak. Securing the bank means controlling who touches items, how they move, and what happens when one escapes.

How should testing programs verify candidate identity without making check in a nightmare?

Identity verification is the front door of exam security: it stops proxies and repeat cheats under new names. Done badly, it also locks honest candidates out over lighting, name formats, and documents the process never told them to bring.

How should testing programs run a fair appeals process for flagged exam results?

A flagged exam result is an accusation, and the appeals process is where a testing program proves it can tell the difference between evidence and suspicion. A fair, documented process protects honest candidates and makes enforcement against real cheating stick.

How should extra time and breaks work in proctored online exams?

Extra time and rest breaks are standard accommodations in education, and remote proctoring has to implement them without treating the candidate as a suspect. Done well, the system applies adjustments invisibly; done badly, every break looks like a flag.

Second devices and screen sharing: closing the quiet cheating channels

Lockdown browsers guard one screen. The phone under the desk, the tablet beside the keyboard, and the friend watching through a screen share sit outside that guard. This guide explains how second device cheating works and which controls genuinely narrow it.

Brain dump sites and exam content theft: how harvested questions lose their value

Brain dump sites sell real exam questions harvested by candidates who memorised or recorded them. A certification with a thriving dump market quietly stops measuring skill. This guide explains how harvesting works and how exam programmes defend their item banks.

Identity checks before remote exams: matching the person who studied to the person who sits

Remote exam security starts before the first question: confirming the person at the keyboard is the enrolled candidate. Programmes can choose from document checks, biometric comparison, and live verification, each with trade offs. This guide compares the options and how to handle failures fairly.

Exam accommodations in online proctoring: getting approved support to work on the day

An accommodation that is approved on paper can still fail in a live proctored exam if the proctor, the software, and the candidate are working from different assumptions. This guide covers how to set up common accommodations in online exams, what to confirm in advance, and what to do if support is challenged mid exam.

Flagged exam sessions: a fair review process after an alert

An automated flag is a reason to look, not a verdict. This guide sets out a review process for flagged online exam sessions that is consistent, documented, and fair to candidates, while still protecting the value of the qualification.

Exam accommodations and integrity: holding both at once

A practical guide to exam accommodations and integrity for test owners who worry that extra time or tools will be treated as loopholes. It covers how to diagnose the real cause from records, the smallest fix that holds, and how to check after one full cycle whether the change actually worked.

Candidate ID photos: matching a face to a record without friction

A practical guide to candidate ID photo checks for training providers and exam boards who run secure online assessments. It covers how to diagnose the real cause from records, the smallest fix that holds, and how to check after one full cycle whether the change actually worked.

Exam rescheduling rules: fair cutoffs that reduce no shows

A practical guide to exam rescheduling rules for exam providers managing bookings. It covers how to diagnose the real cause from records, the smallest fix that holds, and how to check after one full cycle whether the change actually worked.

How do testing programs spot collusion when two candidates answer alike?

Answer similarity analysis compares how alike two candidates responses are, especially their wrong answers. Used well it opens an investigation. Used badly it accuses study partners and classmates of cheating for sharing a teacher. This post covers the statistics in plain terms and the safeguards that make a collusion case fair.

How should exam programs handle AI assistants a candidate can run on a second screen?

An AI assistant on a phone beside the keyboard defeats question security without touching the exam machine. This post covers what lockdown browsers cannot see, the item design choices that blunt AI answers, and the response data that shows a candidate is reading rather than reasoning.

Proctoring flags need a human review queue, not an automatic accusation

Automated proctoring flags gaze, sound, and second faces at rates no testing program can treat as proof. This post covers how to build a review queue that clears the innocent quickly, documents the real cases, and surviv

Impersonation at test centres: the ID check is the exam before the exam

Proxy test taking starts at the check in desk. A paid impersonator with a convincing document defeats every downstream control, which makes the ID check, the photo comparison, and the admission record the controls that m

Contract cheating signals: the essay was bought, and the file knows it

Contract cheating leaves evidence in document metadata, writing style breaks, and submission behaviour, long before anyone proves who wrote the work. This post sets out the signals examiners can use fairly, and where the

Lockdown browser bypasses: what the workaround videos leave out

Every lockdown browser has bypass videos: second devices, virtual machines, HDMI tricks, and coached helpers off camera. This post reviews the main bypass families, what they actually achieve, and why exam design matters

Remote proctoring flags: reviewing alerts before accusing a candidate

A practical guide to remote proctoring flags for exam providers using remote proctoring. It covers how to diagnose the real cause from records, the smallest fix that holds, and how to check after one full cycle whether the change actually worked.

Exam window rules: how long a sitting should stay open

A practical guide to exam window rules for training providers and exam boards who run secure online assessments. It covers how to diagnose the real cause from records, the smallest fix that holds, and how to check after one full cycle whether the change actually worked.

Remote exam identity checks that respect candidate privacy

A practical guide to remote exam identity checks for assessment teams balancing fraud prevention with candidate trust and data rules. It covers how to diagnose the real cause from records, the smallest fix that holds, and how to check after one full cycle whether the change actually worked.

Exam item banks: rotating questions without breaking fairness

Reusing the same questions invites harvesting, but rotating items carelessly creates sittings of uneven difficulty. This guide explains how to build, calibrate, and rotate an item bank so each exam form is fresh and defensibly comparable.

Lockdown browsers explained: what they can block, what they cannot, and why policy still matters

A lockdown browser restricts the candidate's device during an online exam: blocking other apps, sites, and shortcuts. It is a useful layer and a limited one. This guide explains what lockdown browsers genuinely control, where their reach ends, and why exam rules and design still carry most of the integrity load.

AI tools and remote exams: writing a policy candidates can actually follow

AI assistants have made the old closed book rules ambiguous. Candidates genuinely do not know whether an AI grammar check, a coding assistant, or a study chatbot counts as cheating on a given exam. This guide covers how exam owners write AI policies that are clear, enforceable, and fair.

How long should remote exam recordings and proctoring data be kept?

Remote proctoring collects some of the most personal data in education: video of a candidate's home, audio, screen activity, and identity documents. How long that data is kept, who can see it, and when it is deleted are decisions institutions must make deliberately.

How do candidates bypass browser lockdown tools during remote exams?

Browser lockdown tools block tabs, applications, and shortcuts during a remote exam, but candidates bypass them with virtual machines, second devices, and configuration gaps. Programs that rely on lockdown alone are defending one door of a house with several.

How are candidates using AI tools to cheat on remote exams, and what actually detects it?

AI assistants, hidden second devices, and real time answer feeds have changed remote exam cheating from copying notes to outsourcing thinking. Detection now depends on identity, environment, and response pattern evidence combined, not on watching a webcam alone.

How do testing programs detect proxy test takers hired to sit an exam?

Proxy test taking, where a candidate pays someone else to sit an exam, defeats identity checks that stop at the door. Programs catch it by linking identity, behavior, and performance signals across the whole test journey.

What should exam programs do when exam content leaks during a testing window?

A leak during a live testing window is an incident, not a rumor. Programs need a rehearsed response: verify fast, protect unexposed items, decide fairly for candidates mid window, and communicate before speculation fills the gap.

How do exam platforms use gaze tracking without flagging honest test takers?

Gaze tracking flags where a test taker looks, but honest people look away to think. Good systems calibrate baselines, weigh patterns over time, and route flags to human review instead of auto failing anyone.

How do exam platforms detect virtual machines and second devices?

Remote exam cheaters hide behind virtual machines and second screens. Detection layers combine environment fingerprinting, behavior, and network signals.

How do cheating rings use real-time AI assistance during proctored exams?

Real-time AI assistance through earpieces and smart glasses is defeating webcam proctoring. How the cheating rings operate and what actually stops them.

How do exam bots use screen-sharing to leak live test content?

Screen sharing turns one test-taker into a broadcast station. How exam bots use shared screens to leak live test content, and how proctoring platforms detect the stream.

How do exam bots exploit accessibility features to scrape question banks?

Accessibility tools read the screen aloud for users who need them. How bots abuse those same features to harvest entire question banks.

How do hidden audio earpieces defeat remote proctoring checks?

A tiny earpiece, a phone in another room, and a whispered answer feed. How audio-based cheating works and how proctoring catches it.

How do deepfake video feeds try to defeat live remote proctoring?

The face on the webcam is not always the test-taker. How real-time face swaps and synthetic video attack remote proctoring, and how detection keeps up.

How do AI-generated fake IDs fool remote exam check-in?

The ID looks real, the face matches, and the document passes a visual check. None of it exists. How generative tools produce synthetic IDs that beat human review, and the verification layers that catch them.

How do proxy test-takers beat ID verification in online exams?

Someone else sits the exam, and the system never notices. The techniques proxy test-taking rings use against ID checks, and the layered verification that catches them.

How do contract-cheating sites turn exam answers into a subscription business?

Cheating has a business model now: monthly subscriptions for on-demand exam answers. How these services operate, why they are hard to shut down, and what exam owners can do.

How do collusion rings coordinate cheating during live online exams?

The hardest cheating to catch is not one student with a cheat sheet; it is twenty students working as one. How collusion rings coordinate in real time and the analytics that expose them.

How do virtual machine tricks let test takers cheat inside locked-down exam browsers?

Lockdown browsers assume they own the machine; virtual machines break that assumption. How VM-based cheating works, why it is hard to detect, and the checks that close the gap.

Second screen cheating in remote exams: the phone below the webcam

Remote proctoring sees the screen it is given and the face in the camera. A second device below the desk, a phone with answers, a helper's messages, or an AI chat, sits outside both views, and exam programmes are redesigning aroun

AI paraphrasing and written assignments: what integrity means now

Paraphrasing tools, human or AI, can restate a source until text matching finds nothing, which breaks the detection model most institutions grew up with. The response that works is process evidence: drafts, plans, and the ability

Wondering how much of your traffic is real?

Get a free bot-traffic audit. We sample your live traffic and show the human-automated split, endpoint by endpoint.

Get a free bot-traffic audit
November 2, 2026

Contract cheating signals: the essay mill leaves fingerprints a similarity score cannot see

A bought essay is written for your assignment, so plagiarism matching finds nothing. Detection has to move to authorship signals: document history, style breaks, and a short conversation about the work. This post lays ou

November 2, 2026

Proctoring flags are not findings: how to review automated alerts without convicting the innocent

Remote proctoring software flags gaze, sound, and second faces at rates no reviewer should take at face value. This post gives a review protocol: what a flag means, base rates, which clips to escalate, and the appeals da

November 3, 2026

Identity checks before the exam: the impostor is stopped at the door or not at all

Remote proctoring watches the exam. Identity verification decides who sat it. A proxy test taker with the candidate's login passes every in exam check designed for a stranger, so the control that matters runs before the

November 3, 2026

Question bank leaks: your exam is on a homework site, now what

Leaked question banks surface on homework help and file sharing sites with the exam's own wording, searchable by any student with a phone. This post covers how banks leak, how to find your material, what takedowns do and

November 4, 2026

Lockdown browsers stop the exam device, and nothing else in the room

University guidance on LockDown Browser is blunt: it locks the computer the exam runs on, and it does not prevent a student looking answers up on another device or taking the exam with help in the room. Treating a lockdo

November 4, 2026

Second devices in remote exams: designing for the phone you cannot see

Every remote proctoring stack has the same blind spot: the phone beside the laptop. Invigilator and Honorlock both state that browser lockdown cannot determine whether a second device is in use. The realistic response is

November 5, 2026

How Bots Game Limited Releases, Quizzes and Gated Pages

Limited releases, timed quizzes, and gated pages share one weakness: they reward speed and volume at a gate. Bots exploit that gate with farmed accounts, rotating address

November 5, 2026

Answer sharing on timed quizzes: the leak is usually a person, not a bot

When quiz answers appear on sharing sites, teams blame bots and buy scraping defences. Often the source is simpler: one legitimate user copying questions during a real at

November 6, 2026

How Exam Cheating Rings Automate Answers in Real Time

The 2020 proctoring model assumed the cheat was in the room. Now it is on a second device, in an overlay, or in an AI assistant the camera never sees.

November 6, 2026

IP Bans Don't Stop Exam Bots: Why Rotation Wins

IP bans assume one attacker, one address. Residential proxy rotation gives the bot a new home IP per request, and the ban never lands.

November 7, 2026

Proctoring Flags Honest Students Too: What the False Positive Numbers Actually Say

Proctoring vendors quote accuracy numbers that fall apart on real students. The Stanford study is the one to know, and the gap it found is not small.

November 7, 2026

How Cheating Rings Sell Exam Answers as a Subscription

Contract cheating now sells like software, by subscription, next to legitimate study help. The storefront looks like tutoring, and the risks students miss are the ones that cost the most.

November 8, 2026

Take-Home Exams: Designing Assessments Bots Cannot Game

A take-home exam that asks for recall will be answered by a bot. One that asks for judgment, applied to a case the student has to work through, is much harder to game.

November 8, 2026

Discord and Telegram: Where Exam Answers Trade in Real Time

Exam answers now trade in Discord servers and Telegram groups while the exam is still running. The channels are fast, hard to shut down, and built for exactly this.

November 9, 2026

Contract Cheating in 2026: Proxies, Remote Access, and Hidden AI

Contract cheating used to mean paying someone to write an essay. Now it means a proxy on remote access, or an invisible AI feeding answers during the exam.

November 9, 2026

The Second Device Problem: Phones, Smartwatches, and the Exam You Cannot See

A locked-down browser secures one screen. The cheating happens on the other one: the phone propped out of frame, the watch, the tablet on the desk.

November 10, 2026

Hybrid Proctoring: Why AI Flags Plus a Human Reviewer Beat Either Alone

AI proctoring flags more violations than humans alone, and humans cut the false positives AI generates. The hybrid model is not a compromise. It is the only arrangement where the evidence holds up.

November 10, 2026

Turnitin's AI Score: What It Can Prove and What It Cannot

Turnitin scores each sentence and reports the share that looks AI-written, but the score is a probability, not proof of authorship. How the indicator works, why eight universities switched it off, and what a marker should do instead.

November 11, 2026

When a candidate's internet drops mid-exam: what should the program do?

A dropped connection is the most common technical failure in remote proctoring, and most platforms handle it as a pause, not a fail. What the program owes the candidate, and what to decide before exam day.

November 11, 2026

What should a testing program do when AI writes the candidate's answers?

AI-written exam submissions are now common enough that detection alone cannot be the policy. The programs that cope best treat the detector as a signal, change the assessment, and decide what counts as evidence.

November 12, 2026

Your video feed dropped mid-exam: what the proctor does next, minute by minute

A dropped video feed is the most common technical failure in remote proctoring, and the platforms that handle it well treat it as a pause with a clock, not a fail with an appeal.

November 12, 2026

What is a brain dump site, and how do certification programs fight them?

A brain dump is a real exam, memorized by a candidate and sold to the next one. The programs that fight it best do not chase the sites. They change what the exam measures.