PROJECT: THE MATRIC EXAMINATION - CHEATING, LEAKS AND DIGITAL FRAUD
PLEASE SHARE THIS PUBLIC DOCUMENT
The National Senior Certificate examination system depends on the confidentiality of examination material
and the credibility of the results awarded to learners. When question papers are obtained before an examination,
distributed electronically, sold through social-media platforms or used to facilitate organised cheating,
the consequences extend beyond the individuals involved.
The growth of WhatsApp, Telegram, cloud storage, removable devices and artificial intelligence has increased
the speed at which examination material can be copied and distributed. At the same time, criminals have developed scams around the demand for supposed leaked papers, targeting learners and parents who are anxious about examination results.
Recent South African court proceedings concerning examination irregularities have also highlighted the importance of distinguishing genuine misconduct from circumstances where the available evidence does not establish responsibility. Examination security and procedural fairness must therefore be addressed together.
THE EXAMINATION PAPER AS A CRIMINAL TARGET:
Confidential examination papers have significant value to anyone seeking an unfair academic advantage. They can also become the target of individuals looking to profit from the fear surrounding matric examinations.
A compromised paper can move rapidly from its source to learners through photographs, screenshots, removable storage devices, messaging applications and printed copies. What begins as a single security breach can therefore develop into widespread distribution before examination authorities become aware of the problem.
The 2025 National Senior Certificate examination demonstrated the seriousness of this risk when several question papers were compromised and subsequently distributed through electronic and physical channels. The matter was referred for further investigation, illustrating that examination security can become a law-enforcement issue rather than simply a disciplinary matter.
THE BUSINESS OF SELLING LEAKED PAPERS:
The demand for leaked examination papers creates an opportunity for criminals to make money.
A person may advertise access to a forthcoming paper and request payment from learners or parents. The material supplied may be genuine, stolen, outdated, fabricated or completely unrelated to the examination. In each situation, the buyer can suffer financial or academic consequences.
The transaction may also be used to obtain personal information. Criminals can request identification documents, banking details, telephone numbers or other information under the pretext of verifying the purchaser or completing a transaction. The supposed examination leak can therefore be the bait for a broader fraud scheme.
FAKE LEAKS AND DIGITAL FRAUD:
Not every person offering a leaked paper has access to examination material. Some are simply exploiting the reputation of examination leaks to defraud their targets.
Screenshots, photographs of documents and claims that previous customers have received genuine papers can create an appearance of credibility. Criminals may also use multiple social-media accounts to promote the same offer or create artificial demand.
Parents can be particularly vulnerable to these schemes because the desire to assist a child under examination pressure may override normal caution. Paying money does not guarantee access to legitimate material and may expose the purchaser to further criminal activity.
THE ROLE OF MESSAGING PLATFORMS:
Messaging applications can significantly increase the reach of examination material. A single photograph or document can be forwarded to numerous people within minutes, making containment difficult once confidential information has escaped its source.
Learners should not assume that material circulated within a private group is automatically safe or that participants cannot be identified. Digital communications may leave records that assist investigators in determining how information was obtained and distributed.
The responsible response to suspicious examination material is to stop its circulation and report it rather than forwarding it to friends or other groups.
DIGITAL FORENSICS AND THE INVESTIGATION:
An examination-leak investigation must establish the origin, movement and use of the material.
Depending on the circumstances, investigators may examine mobile phones, computers, removable storage devices, messaging records, email accounts, payment transactions, access logs, photographs, metadata and CCTV footage. These sources can help establish relationships between individuals and determine whether material was obtained, distributed, purchased or knowingly used.
The handling of electronic evidence is also significant. Digital information must be preserved and examined in a manner that allows investigators to explain where it came from and how it was obtained. Where criminal proceedings follow, the reliability and continuity of the evidence may become important issues.
ARTIFICIAL INTELLIGENCE AND FABRICATED EXAMINATION MATERIAL:
Artificial intelligence introduces a further complication because convincing documents and images can now be created or manipulated relatively easily. A fabricated examination paper can be designed to resemble genuine material closely enough to persuade an anxious learner or parent that it is authentic. AI can also be used to create false screenshots, impersonate individuals or manufacture supporting information intended to make a scam appear credible.
This means that visual appearance alone cannot establish that a document is genuine. Examination authorities, investigators and other responsible parties must rely on verification and evidence rather than assumptions based on how convincing digital material appears.
CHEATING AND THE QUESTION OF INDIVIDUAL RESPONSIBILITY:
Where examination irregularities are discovered, investigators must establish the circumstances surrounding each learner's involvement. For example, a group of learners producing similar answers may justify an investigation, but similarity alone does not necessarily establish how each learner obtained the information or whether every learner participated in the same misconduct.
Recent court proceedings involving matric learners whose results were withheld demonstrate why this distinction matters. In a recent Limpopo High Court matter, the court ordered the release of results and certificates for 50 former learners after finding that the education authorities had not established sufficient evidence that the learners had cheated. The case illustrates the importance of reliable evidence when decisions may affect a learner's results, qualification and future opportunities.
PROTECTING THE INTEGRITY OF THE EXAMINATION SYSTEM:
There are two responsibilities that must be maintained simultaneously.
The first is protecting the examination system against theft, cheating, unauthorised disclosure and organised attempts to obtain unfair advantages. The second is ensuring that disciplinary or criminal action is based on facts and that affected learners are treated in accordance with applicable procedures.
Neither responsibility should be sacrificed for the other. Weak enforcement can undermine examination security, while decisions unsupported by sufficient evidence can cause serious injustice.
RED FLAGS FOR LEARNERS AND PARENTS:
Particular caution is warranted when someone:
offers a question paper before the scheduled examination;
demands payment in exchange for supposed confidential material;
insists that the transaction must remain secret;
pressures the recipient to make an immediate payment;
requests identification documents or banking information;
provides screenshots as the only evidence that the material is genuine; or
claims to have access through an unnamed insider.
The safest approach is not to purchase, forward or publish the material. Suspicious offers should instead be reported through the appropriate channels.
THE COST OF EXAMINATION FRAUD:
The consequences of examination fraud extend beyond the learner who participates.
An unfairly obtained result can affect the credibility of qualifications held by thousands of other learners who completed their examinations honestly. Universities, employers and other institutions also depend on the National Senior Certificate as an indication of academic achievement.
Repeated examination breaches can therefore weaken public confidence in the education system and create pressure for increasingly stringent security measures. For learners, the short-term attraction of obtaining an examination paper can consequently carry long-term academic, disciplinary and legal consequences.
WHAT LEARNERS AND PARENTS SHOULD DO:
If suspicious examination material is received, it should not be circulated further. The recipient should retain relevant information where this can be done safely and report the matter to the appropriate examination authorities or law-enforcement agency.
Parents should also be cautious about paying individuals who claim to have access to confidential papers. A request for money is not evidence that the material is genuine, and attempts to obtain personal or banking information should be treated as a potential fraud warning.
Social-media accusations should likewise be avoided. Investigations should be based on evidence rather than public speculation, particularly where identifiable learners or educators are concerned.
The modern examination environment has created new opportunities for both cheating and criminal exploitation.
Genuine examination breaches can result in widespread distribution of confidential material,
while fake leaks provide criminals with an opportunity to defraud learners and parents.
Protecting the integrity of the matric examination requires secure examination procedures, responsible behaviour by learners and parents, and evidence-based investigations when irregularities occur. Where specialist investigative assistance is required, SSS investigators under the direction of Mr. Mike Bolhuis can assist with the assessment and investigation of relevant evidence.
RELEVANT SSS PROJECTS:
Specialised Security Services invites the public to the Mike Bolhuis Daily Projects WhatsApp Channel.
This channel is important in delivering insights into the latest crime trends, awareness, warnings and the exposure of criminals.
How to Join the WhatsApp Channel:
1. Make sure you have the latest version of WhatsApp on your device.
2. Click on the link below to join the Mike Bolhuis Daily Projects WhatsApp Channel:
3. Follow the prompts to join the channel.
4. Make sure you click on "Follow", then click on the "bell"-icon (🔔)
CONTACT MR MIKE BOLHUIS FOR SAFETY AND SECURITY MEASURES, PROTECTION, OR AN INVESTIGATION IF NEEDED.
ALL INFORMATION RECEIVED WILL BE TREATED IN THE STRICTEST CONFIDENTIALITY AND EVERY IDENTITY WILL BE PROTECTED.
Regards,
Mike Bolhuis
Specialist Investigators into
Serious Violent, Serious Economic Crimes & Serious Cybercrimes
PSIRA Reg. 1590364/421949
Mobile: +27 82 447 6116
E-mail: mike@mikebolhuis.co.za
Fax: 086 585 4924
Follow us on Facebook to view our projects -
EXTREMELY IMPORTANT: All potential clients need to be aware that owing to the nature of our work as specialist investigators there are people who have been caught on the wrong side of the law - who are trying to discredit me - Mike Bolhuis and my organisation Specialised Security Services - to get themselves off the hook. This retaliation happens on social media and creates doubt about our integrity and ability. Doubt created on social media platforms is both unwarranted and untrue. We strongly recommend that you make up your minds concerning me and our organisation only after considering all the factual information - to the exclusion of hearsay and assumptions. Furthermore, you are welcome to address your concerns directly with me should you still be unsatisfied with your conclusions. While the internet provides a lot of valuable information, it is also a platform that distributes a lot of false information. The distribution of false information, fake news, slander and hate speech constitutes a crime that can be prosecuted by law. Your own research discretion and discernment are imperative when choosing what and what not to believe.
STANDARD RULES APPLY: Upon appointment, we require a formal mandate with detailed instructions. Please take note that should you not make use of our services – you may not under any circumstance use my name or the name of my organisation as a means to achieve whatever end.
POPI ACT 4 of 2013 South Africa: Mike Bolhuis' "Specialised Security Services" falls under Section 6 of the act. Read more here: https://mikebh.link/fntdpv
SSS TASK TEAM:
Copyright © 2015- PRESENT | Mike Bolhuis Specialised Security Services | All rights reserved.
Our mailing address is:
Mike Bolhuis Specialised Security Services
PO Box 15075 Lynn East
Pretoria, Gauteng 0039
South Africa
Add us to your address book
THIS PUBLIC DOCUMENT WAS INTENDED TO BE SHARED, PLEASE DO SO.
