Testing fraud and cheating
Types of exam fraud, and how to spot them.
Fake certificates, score sellers, leaked questions and proxy test takers all trade on a test's name. Here's what each looks like, the warning signs, and how testing organizations get them taken down.
PostGet your SET certificate without sitting the exam. Verified and accepted for visas.3
WhatsApp +61 4xx xxx 219 for today's price.4 Real score reports in the comments.
- 1Official-sounding nameResults Desk, Official or a staff member's name, added to look like the test provider.
- 2Big following, new pageFollowers can be bought. Check when the page was created and who runs it.
- 3No exam neededNo real provider sells a result. A certificate without a test is fake.
- 4Off to a private chatPrices, payment and "proof" move to WhatsApp or Telegram, away from the platform.
Tap a numbered part of the post to see what it means.
How it works
How score sellers find and fool candidates.
Most exam fraud happens long before test day. Sellers go where candidates gather, promise a shortcut, and use fake proof to get paid.
Visa and study help 2026set exam pass guaranteedSET speaking tipsFind
They go where candidates are.
Migration, student and job groups are full of people with a test date and a deadline.
Promise
A shortcut is offered.
Guaranteed scores, leaked questions, someone to sit the test for you, or a certificate with no test at all.
Prove
Fake proof builds trust.
Edited score reports, copied logos and staged success stories, sometimes using real candidates' details.
Take
The money goes out.
Candidates pay for a fake or for nothing, and every fake makes real results harder to trust.
Types of exam fraud
Eight ways tests get cheated, faked or sold.
Some offers cheat the test. Others just cheat the candidate. Pick one to see how it works.
Fake certificates and score reports
Edited or invented results documents, sold to candidates or shown off as proof that a seller can deliver.
How it works: sellers copy the layout, logo and security features of a real score report, then add a buyer’s name and score. Some post real candidates’ reports, exposing their personal details along the way.
Guaranteed scores, no exam
Offers to deliver a set score, or a pass without sitting the test, for a fee.
How it works: the offer plays on deadlines for visas, jobs and university places. Most buyers get nothing or a fake document. A promise that the score will “show in the official portal” is meant to sound like inside access.
“Leaked from the test centre. Same questions as your exam date.”
Leaked questions for sale
Channels and sites that claim to sell real, current test questions and answers.
How it works: some sell material that has genuinely leaked, others sell recycled practice tests dressed up as leaks. Either way the offer needs checking, because a confirmed leak can affect every result from that test window.
Recalled questions in groups
Candidates sharing the questions they remember straight after their test, in large prep groups and forums.
How it works: it often starts innocently, but collected recalls build a bank of live questions that sellers then repackage. It’s an early sign of which questions are exposed and need to be retired.
Proxy test takers
Services that send someone else to sit the test in the candidate’s place, using their identity.
How it works: the seller claims they can match photos and ID documents to get a stand-in past check-in. When it works, the score belongs to someone who never sat the test. When it doesn’t, the buyer often loses the money anyway.
Remote help during the test
Offers to help candidates cheat while they sit the test, including remote access tools and hidden earpieces.
How it works: for tests taken online, sellers offer to control the computer or feed answers out of sight of the camera. Any “undetectable” claim should be taken seriously, because it’s a direct test of how secure the exam is.
Official help desk for SET candidates. DM us to book, change dates or fix your score.
Fake provider and staff accounts
Accounts that pose as the test provider, a test centre or a named staff member.
How it works: they copy the provider’s logo and tone, then offer help with bookings, results or “score corrections”. Because they look official, candidates hand over money, ID documents and login details without a second thought.
Fake booking and prep sites
Lookalike websites that take booking fees, sell “official” prep material or collect candidates’ ID documents.
How it works: the site uses the test’s name in its address and copies the real booking flow. Candidates pay for a seat that doesn’t exist, and their passport details can be reused for other scams.
In the data
What exam fraud looks like in our monitoring.
Four weeks of monitoring for one international testing organization, March 2026.
of the threats we found were fake certificates and score reports
were sellers soliciting candidates with leaked questions, guaranteed scores or remote help
came from ongoing profiles and pages, not one-off posts
of the takedowns we actioned were removed
Where we found them
- Facebook
66% - Instagram
14% - Websites
9% - Everything else
RedNote, Telegram, TikTok, X11%
Sellers rarely stick to one platform. The same names, phone numbers and websites turned up across social media, messaging apps and forums, so they were tracked and removed as networks.
Source: Unphish four-week monitoring for one international testing organisation, March 2026. Example names are illustrative. Figures are rounded.
Why tests get targeted
A pass can change someone's life. That's why it's sold.
When a score decides a visa, a job or a place at university, some candidates will pay for a shortcut. Sellers know it, and the test owner's name is what they sell.
The stakes are high
Visas, professional registration and study places all hang on a score, often with a deadline attached.
Candidates gather in one place
Migration, student and prep groups make it easy for sellers to reach thousands of candidates at once.
Every fake costs trust
When fake results circulate, employers and governments trust every result from that test a little less.
English tests have been accepted for Australian visas since August 2025, and only when sat in person at a secure test centre.
Source: Department of Home Affairs, 2025Seller networks
One seller, many accounts.
Score sellers spread themselves across platforms so one removal doesn't stop them. The same name, phone number and website tie the accounts together, and many sellers offer scores for several different tests at once.
- The same WhatsApp or Telegram number on every account
- One website linked from every profile
- Accounts posing as the test provider or its staff
- Answers seeded on Q&A sites and forums to look trustworthy
- FBSET Score Help CentreFacebook page selling score reportsRemoved
- IG@set.results.officialInstagram account posing as the providerRemoved
- TGSET Real QuestionsTelegram channel selling “leaked” papersRemoved
- WEBset-score-help.comWebsite linked from every accountReported
Use case
How test owners use Unphish to stop exam fraud.
Score sellers, leaks and fake accounts land with exam security, candidate support and legal teams at once. Unphish finds them across social media, messaging apps and the web, links them into networks and gets them removed.
Exam security and integrity
Know which questions are exposed.
We flag leaks, recalled questions and cheating offers, so items can be retired.
Candidate support
Fewer candidates caught out.
We remove the fake support accounts and booking sites candidates fall for.
Legal and brand
Your name and certificates used only by you.
We send copyright and trademark takedowns with the evidence attached.
Partners and test centres
A network everyone can trust.
We spot accounts posing as your centres and reporting that shows partners what was removed.
An account posing as your support team is selling score reports to candidates.
- 01Spotted
The account using your test's name, logo and score report layout is picked up and scored.
Sees an alert in the Threat Feed.
- 02Checked
An analyst confirms it's unauthorised and captures the posts, fake reports, contact numbers and linked sites.
Gets the evidence pack and approves enforcement in one click.
- 03Taken down
Trademark, copyright and impersonation reports go to each platform with proof, and are escalated until removed.
Follows live status in the Enforcement Centre. No forms to fill in.
- 04Linked
Other accounts with the same number, website or seller name are grouped into one network and removed together.
Follows the whole network behind the accounts.
- 05Reported
Removal is verified and new accounts from the same seller are watched for.
Gets reporting for exam security, legal and partners.
Case study · International testing organisation
100%
of the takedowns we actioned during four weeks of monitoring in March 2026 were removed.
A high-stakes test was being sold, faked and impersonated across social media, messaging apps and websites, much of it aimed at candidates with deadlines to meet.
See Threat Intelligence →Client name withheld to protect confidentiality.
Jargon, decoded
The exam security terms worth knowing.
The words exam security, candidate support and legal teams use, in plain English.
- Proxy testing
- Someone else sitting the test in the candidate’s place, using their identity. “We sit it for you”
- Leaked items
- Live test questions that have got out before or during a test window. “This month’s real questions”
- Recalled questions
- Questions candidates remember and share after the test. Collected together, they’re often called brain dumps. “Speaking part 2 was…”
- Item exposure
- How widely a question has been seen or shared, which decides when it needs retiring. a question shared in 12 groups
- Score upgrade
- A seller’s claim that they can change a score in the provider’s own system. “Shows in the official portal”
- Fake score report
- An edited or invented results document with a buyer’s name and the score they paid for. SET_report_verified.pdf
- Remote access cheating
- Someone controlling the candidate’s computer or feeding answers during an online test. “Undetectable, any test”
- Letter of authority
- A document showing a takedown provider is acting for the test owner, which many platforms ask for. sent with each report
Warning signs
How to spot a fake score offer.
A real-looking example
Photo: a score report with the candidate's name blurred3
Need your SET score fast? Guaranteed band 8, no exam needed.4
Verified in the official system and accepted for visas.5
WhatsApp us for today's price, pay half now.6
- 1Official-sounding but newTest providers don't sell results through new pages or personal profiles.
- 2Posted where candidates gatherMigration, student and prep groups are where sellers look for buyers.
- 3Score reports as proofReal reports are private. One posted as an ad is fake or someone else's.
- 4A score without a testNo legitimate provider guarantees a score or skips the exam.
- 5Claims of system access"Verified" or "in the portal" is meant to sound like inside help. It isn't.
- 6Off to a private chatPrices and payment move to WhatsApp or Telegram, away from the platform.
Checklist for your team
Found someone selling your test? Here's what to do.
Sellers run several accounts at once and come back under new names, so the first few steps matter most.
0 of 5 done
Tap each step to tick it off.
If candidates have been scammed, point them to
Want us to handle it? Request a takedown →
For your candidates
Help candidates spot a fake score offer.
Two short notes you can adapt for your website, booking emails, candidate handbooks or support replies. One warns people before they test. The other tells them what to do if they've already paid a seller.
The copied version leaves blanks for your test name and official details.
Scores can't be bought
- No one can sell you a score, a certificate or a pass without sitting the test.
- We never sell test questions or answers, and leaked papers are almost always fake.
- Our staff won't contact you on WhatsApp or Telegram to offer help with results.
- Only book at set-test.example, our official site.
- Results are only shown in your official candidate account.
Seen an offer like this? Report it at set-test.example/report
ExamplePaid someone for a score or questions?
- Stop paying, even if they ask for a final fee to “release” your result.
- Call your bank or payment app and ask about getting the money back.
- If you sent ID documents, contact IDCARE for advice.
- Don't use any certificate they send. A fake can put your visa or job at risk.
- Tell us who contacted you, so we can get them taken down.
Then book your test through our official site.
ExampleHow Unphish stops it
Get the sellers taken down.
Unphish finds score sellers, leaks and fake accounts across social media, messaging apps and the web, proves they're unauthorised and gets them removed. Then we keep watching for the same seller to come back.
- Every case checked by an analyst before a report is sent
- Trademark, copyright and impersonation proof handled for you
- Accounts from the same seller removed together
Logo and score report layout copied from the official test
- DetectedAccount using the test's name and logo
- Evidence capturedPosts, fake reports and contact numbers
- Confirmed by an analystUnauthorised seller posing as the provider
- Reported to the platformTrademark and impersonation report with proof
- Linked accounts foundSame number on a Facebook page and a website, reported too
- Removed and watchedRemoval verified, new accounts monitored
FAQ
Exam fraud questions, answered.
What is exam fraud?
Exam fraud is any attempt to get a test result without earning it, or to sell one. Online it includes fake certificates and score reports, offers of leaked questions or guaranteed scores, people paid to sit the test for someone else, and tools or remote help used during the exam.
Are fake certificates and score sellers really a problem for test owners?
Yes. Candidates lose money, real results get questioned by employers and regulators, and sellers often pose as the test provider or its staff, so the damage lands on the test's name.
How do exam questions get leaked?
Some are recalled by candidates after sitting and pooled in chat groups and forums. Others are offered for sale as "real exam questions", which may be a genuine leak or recycled material. Both need checking quickly, because a confirmed leak affects every candidate.
Doesn't proctoring stop cheating?
Proctoring controls what happens during the test. It doesn't reach the accounts, groups and websites selling scores, fake certificates and leaked material before candidates ever sit down.
How long does it take to remove a score-selling account?
It depends on the platform and the evidence. Most platforms act on a clear report under their fraud or impersonation rules, while websites and repeat accounts may need escalating to the host or registrar.
How can candidates protect themselves?
Only book through the official test website, never pay anyone who promises a score or a certificate without sitting the test, and check results through the provider's official verification service.
Can you monitor for tests sat in other countries and languages?
Yes. Score sellers work across languages and platforms, so monitoring covers the regions, platforms and communities where your candidates are.
By industry
Fake credentials in your industry.
Any certificate that opens a door can be faked or sold. See how fraud shows up in yours.
01
Airline and Transport
Fake pilot and crew licence test results.
02
Banking and Financial Services
Sold accreditation and compliance exam answers.
03
Crypto
Fake certification badges and course credentials.
04
Retail and E-Commerce
Fake training certificates for staff and sellers.
05
Public Sector and Government
Fake licences and citizenship test offers.
06
Lottery and Gambling
Fake responsible gambling certificates.
07
Fintech
Leaked onboarding and certification tests.
08
Non-Profit Organisations
Fake volunteer and training certificates.
09
Film and Entertainment
Fake course certificates and sold course content.
Keep exploring
Try it
Real or fake?
Five messages about the Solstice English Test, our example test. Its only booking and results site is set-test.example, and it never sells scores or questions. Which would you trust?
The quickest check: a real test provider never sells scores, questions or a pass, and only shows results in your official account.
Found someone selling your test's results?
Send it to us. We'll confirm it, get it removed and keep watching for the next account.