Cheating is reduced by layers, not by one setting
No online exam system can make cheating impossible, and any vendor who claims otherwise is overselling. What works is a set of layers: papers that differ between candidates, timing that leaves little room to look things up, device and network rules, supervision by people, and a fair process for reviewing suspected cases. The more a test decides, the more layers you add.
This article is for principals, exam in-charges, coaching owners and HR teams who need online test results to be trusted by students, parents and management. It explains each layer, what it actually stops, and where it falls short.
How candidates actually cheat in online tests
Controls make sense only when you know what they are meant to stop. The common methods are not sophisticated:
- Sharing questions and answers: screenshots or photos sent to a WhatsApp group while the test is running, or passed on to a later batch.
- Searching: opening another browser tab or app to look up answers.
- Outside help: a tutor, sibling or friend sitting beside a candidate at home, or answers dictated over the phone.
- Impersonation: someone else taking the test with the candidate's login.
- Copying in a lab: reading a neighbour's screen when everyone has the same paper in the same order.
- Early access: the paper or answer key reaching candidates before the test, usually through a shared staff login or a careless forward.
Match the controls to the stakes of the test
Heavy controls on a weekly practice quiz annoy students and waste staff time. Light controls on an admission or recruitment test invite complaints and challenges. Decide the level for each type of test rather than for the institute as a whole.
| Type of test | Examples | Sensible controls |
|---|---|---|
| Low stakes | Practice quizzes, homework tests, chapter revision | Timer and question and option shuffling. Accept that some students will look things up; the test exists for learning. |
| Medium stakes | Unit tests, term tests, mock series ranks | The above, plus random papers from a pool, navigation limits and a single attempt, with lab supervision or a tab-switch warning for remote candidates. |
| High stakes | Admission tests, recruitment screening, certification | The above, plus a supervised lab with ID checks and IP or device restriction, or webcam proctoring with human review if candidates must test remotely. |
Exam settings that make copying and sharing harder
Once your question bank is deep enough, these settings cost nothing to switch on, and together they remove most of the easy shortcuts.
Shuffle questions and options
When each candidate sees the questions in a different order and the options in a different sequence, a message saying "question 7 is B" becomes useless. Shuffling helps most in labs where neighbours can see each other's screens. Options such as "both A and B" stop making sense when shuffled, so rewrite them first.
Draw different questions for each candidate
Going a step further, each candidate can receive a different set drawn from the same topic and difficulty pools. Screenshots shared during the test then help only the few who happen to get the same questions. This depends on a deep, well-tagged bank; our guide to building a question bank for online exams explains how to set one up.
Time limits and auto-submit
Set the time so a prepared candidate can finish comfortably but has little spare time to search for every answer. Auto-submit when time runs out stops candidates from lingering in the test after answers start circulating. Running all batches of a paper at the same time, or giving each batch a different paper, prevents the first batch from briefing the next.
Navigation and attempt limits
Stopping candidates from returning to earlier questions, or limiting them to one attempt, reduces the value of collecting answers mid-test. Use navigation limits with care, because they also stop honest students from reviewing their work.
Hold back answer keys and solutions
If solutions appear immediately after submission, the first candidate to finish can pass them on. Release answer keys only after every batch has finished.
Device, browser and network controls, and what they miss
Some controls work at the level of the device or the network. They are useful, but each has a blind spot you should understand before relying on it.
| Control | What it does | What it cannot do |
|---|---|---|
| Tab-switch warning | Warns the candidate and records when they leave the exam window for another tab or app. | It cannot see a second phone, a book or a person in the room. |
| IP restriction | Allows the test to open only from approved networks, such as your lab. | It does not help with remote tests, and anyone on the lab network can still log in. |
| Device restriction | Ties a candidate's session to one device, so one login cannot be used on two devices at once. | It does not confirm who is sitting at that device. |
Treat a tab-switch record as a reason to look closer, not as automatic proof. A pop-up notification or an accidental tap can trigger it. Decide in advance how many warnings are tolerated and what happens after that, and tell candidates before the test begins.
Supervision in the lab still does the heavy lifting
For tests that matter, a supervised computer lab remains the strongest single control, because a person in the room deals with things that software cannot see.
- Check photo ID against the admit card and the name on screen at the start.
- Collect phones, smartwatches and bags at the door, or have them switched off and kept in a marked area.
- Seat candidates so that neighbours belong to different batches or have different papers where possible.
- Have invigilators walk the room rather than sit at the front desk.
- Keep an incident register recording the time, the seat, what was observed and what was done.
Preparing the lab itself, from power backup to spare machines, is covered in our online exam (CBT) checklist.
Remote proctoring: what it can and cannot do
Remote proctoring tries to bring some of the lab's supervision to a candidate at home. It usually combines webcam monitoring, screen recording and automated flags for events such as the candidate's face leaving the frame or a second face appearing. A reviewer then checks the flagged moments.
Used well, proctoring discourages casual cheating and gives you evidence when something does happen. Its limits are real, though:
- Automated flags are not proof. Poor lighting, a weak camera or a family member walking past can trigger them, so every flag needs human review before any action is taken.
- Bandwidth matters. Webcam monitoring and screen recording need a steady connection, which not every candidate in smaller towns or villages will have.
- A webcam looks in one direction. A helper outside the frame or notes stuck behind the screen can still go unnoticed.
- It adds work. Someone has to review the recordings, and that time needs to be planned.
Recording candidates' faces and screens means collecting personal data. Tell candidates in advance what will be recorded, why, who will see it and how long it will be kept, and take their consent. India's Digital Personal Data Protection Act, 2023 applies to such data; read the official material on the Ministry of Electronics and Information Technology website and take legal advice on your own policy.
For most school unit tests and coaching practice tests, proctoring is unnecessary. Keep it for remote tests whose results carry real consequences.
Handling suspected malpractice fairly
How you respond to suspected cheating matters as much as how you prevent it. A rushed or inconsistent decision can damage trust more than the cheating itself.
- Publish the rules before the test: what counts as malpractice, what is monitored and what the possible outcomes are.
- Collect the evidence: the invigilator's incident note, tab-switch records, proctoring flags with recordings, and the candidate's answer pattern.
- Look for patterns rather than single events. Two candidates sharing the same unusual wrong answers across many questions is stronger evidence than one tab switch.
- Give the candidate, or the parent in the case of a minor, a chance to explain before deciding.
- Apply the same outcome to similar cases and keep a written record of each decision.
How MATROP's exam controls help, and their limits
MATROP's online examination software includes the settings most institutes need as standard: a timer with auto-submit, shuffling of questions and options, navigation control and attempt limits, along with role-based logins so staff see only what their role allows. Tab-switch warnings and IP or device restriction are available as optional features.
For high-stakes remote exams, proctoring is an optional add-on. It can include webcam proctoring, screen recording and automated flags, with a manual review panel so that a person checks flagged events before any decision is made.
No software, ours included, can stop a candidate from using a second phone at home or getting help from someone off camera. If a result must be beyond doubt, run the test in a supervised lab. And if your actual problem is a paper leaking through a shared staff login, fix access first; that is a process issue rather than a missing feature. Schools that want exams to sit alongside admissions, fees and attendance can see how this fits with our school management software.
Questions people ask
Can online exam software detect a student using a second phone?
No. Software only sees the device the exam runs on. A second phone has to be handled by supervision in a lab, or partly by webcam proctoring for remote tests.
Does a tab-switch warning mean the student cheated?
Not by itself. A notification or an accidental tap can trigger it. Treat it as a signal to review alongside other evidence, under a rule you announced before the test.
Is webcam proctoring worth it for weekly coaching tests?
Usually not. For practice and weekly tests, shuffling, time limits and different question sets are enough; proctoring suits remote tests that decide admission, selection or certification.
What should we tell candidates before a proctored test?
Tell them what is recorded, why, who reviews it, how long it is kept and what happens if something is flagged, and take their consent. Read the DPDP Act 2023 material on the MeitY website and get legal advice on your policy.
