Closeup shot of a young man writing on a note pad.[Getty Images]
Exams: Desperate students, parents fall for online scammers
Education
By
Lewis Nyaundi
| Oct 22, 2025
Online fraudsters are back, preying on desperate students and parents seeking shortcuts to success.
As three national examinations start, an investigation reveals how these syndicates have built a thriving underground economy around the promise of “leaked” examination papers, a business based on deception.
This week, detectives attached to the Kenya National Examinations Council (Knec) arrested a 22-year-old Meru University student believed to be part of a larger ring operating on social media.
READ MORE
Experts assess tea factories set to produce orthodox tea for Chinese market
MMFs lose dominance as more investors seek higher returns
Report: Public debt payments starving hospitals and schools
Cloud revolution in Kenya's Sh17tr engine powered by local talent
State bets on agribusiness to create more jobs for the youth
The future of the workplace and how employees can prepare for it
Kenyan wins top Africa Prize for engineering
How AI boosts some jobs but prompts attacks on women
As lecturers down tools, students find ways to learn and profit from strike
The suspect, who will be presented in court next week to take a plea, was allegedly found with tens of SIM cards, six mobile phones, two laptops in Kianjai, Tigania West Sub-County.
On Tuesday, he was released on a Sh50,000 cash bail, but details of the investigation provide details on how the scammers are taking advantage of the national examinations.
Students will on Wednesday, sit the Home Science practicals as KCSE examination enters the second day. Yesterday, the students did oral tests in French, German, Arabic and Music practicals as the biggest lot of candidates await to start their written examinations on November 4.
The other national tests, KJSEA and KPSEA, will be conducted between Monday next week and November 3.
But as the examinations roll out, an investigation by The Standard found that the scammers set up shop early in the year.
The operation thrives on popular messaging platforms — mainly WhatsApp, Telegram, Facebook, and X. They also pay agents tasked with recruiting members.
An insider revealed that each person joining the group between January and August was paid Sh10. Ringleaders shared educational materials to keep the group alive.
“The group name can be ‘TSC’ to attract people around the education sector who potentially can be the target when the time comes,” the insider said.
However, towards September, the group name was changed to reflect that they would be providing “leakage” for the national examinations.
Trading under banners such as “The Teacher’s KNEC Exam 2025”, the groups promise access to “genuine” KCSE and KCPE papers ahead of the official examination dates.
Once inside the private groups, participants are given a price list and payment instructions.
The prices range from Sh500 for individual papers to over Sh5,000 for “full packages” of subject papers or entire examination sets.
Detectives established that most payments are made through mobile money platforms, primarily M-Pesa, through multiple phone number that are quickly discarded to avoid tracing.
The con artists avoid using their own SIM cards in transactions.
To lure victims, the fraudsters employ manipulation tactics. One of their most effective trick is creating a false sense of urgency by framing the fake “exam leaks” as limited offers that require immediate payment before “slots ran out”.
They also claimed insider access, posing as teachers or Knec officials and using academic titles to project authority and credibility. Some use of fake testimonials to convince participants.
“We circulate screenshots of alleged students celebrating their supposed success after purchasing leaked papers, reinforcing the illusion that the service was legitimate,” the insider said.
To further entrap their victims, buyers are instructed to maintain secrecy to “avoid Knec surveillance,” a move designed to isolate them and prevent verification of the information.
Once a victim sends the money, they either receive outdated past papers repackaged as 2025 papers or nothing at all.
Some are even blocked immediately. “I used to work for another guy in 2023 so when the victim calls and tells me that they have not received the exam paper despite paying I would refer them to the other administrator and tell them he is the one handling the matter,” the insider said.
Knec maintains that all test papers are securely stored under strict protocols, restricted access, and physical security monitored by the police and education officers.
“There is no possibility of accessing genuine exam papers before the day of administration. All materials circulating online are fake, and anyone engaging in their distribution or purchase risks arrest and prosecution,” said Knec chief executive David Njengere.
He appealed to the public to report any suspicious accounts or messages.