
Online Exam Security with Real-Time Tracking (RTT)
Online Exam Security with Real-Time Tracking (RTT)As education and exam processes continue to digiti...
Software engineering recruitment has entered a major security crisis with the widespread adoption of large language models (LLMs) such as ChatGPT, Claude, Cursor, Windsurf, Gemini and similar tools. Algorithms tests and coding interviews, trusted for years, have begun to lose their effectiveness as candidates use AI assistants to produce flawless answers in seconds. In this guide from Qproctor, an exam and interview security platform, we will explain how to detect cheating in technical/coding interviews and answer the question: how is it done?
“Today, developers do not take coding tests alone. They enter the interview room with a silent partner (AI) that works without errors and explains algorithms perfectly. This completely masks the candidate’s real potential.”
In the past, a candidate’s interview performance was the clearest indicator of their performance on the job. But when candidates secretly use AI tools such as ChatGPT, Claude and Gemini during interviews that predictability disappears. Hiring managers are then unable to see how well candidates solve problems under pressure. According to data from the Society for Human Resource Management (SHRM), the cost to a company of an unqualified engineer hired through interview cheating (a bad hire) exceeds $240,000 . This enormous cost leads to system failures, delayed projects and wasted training.
The gap between a candidate’s communication skills in a verbal interview and their real system design ability can now be easily concealed thanks to AI coding tools. The question “Does this code work?” asked by interviewers is becoming meaningless. The critical question in this new era is: “Does the candidate really understand why the AI-generated code works?”
Even someone with only a very basic knowledge of programming can use AI and simple copy-and-paste tactics to pass senior-level algorithm questions . That’s because AI does not make the missing semicolons or simple typos that can give people away.
When a candidate cheats in a coding interview they leave clear traces not only in the tabs on their screen, but also in their eyes, tone of voice and body language.
An engineer thinking and solving a problem naturally will focus their eyes, look into space or move asymmetrically across the screen. However, a candidate reading what ChatGPT/Gemini has written from a second monitor or phone has eyes thatmove horizontally, rhythmically and linearly. Screen reflections in their glasses are also a strong signal that can give away cheating.
A person coming up with their own ideas will have excitement and inflection in their voice. A candidate reading AI-generated text, on the other hand, will sound monotonous and emotionless. More importantly, the appearance of flawless, lengthy code blocks on the screen despite no keyboard sounds being heardmay be definitive evidence that the code was copied and pasted directly.
If a candidate suddenly falters when a hiring manager or technical interviewer asks cause-and-effect questions about the perfect code on screen, such as “Why did you implement this algorithm this way rather than using a different data structure?” or “How would you explain its time complexity?”, there is a problem.
Because AI tools are trained on millions of data points, they produce the most “average” code that best follows the rules. People, by contrast, are pragmatic, rushed and chaotic under time pressure. This method of analyzing who wrote a piece of code is called Code Stylometry .
(usr_dt, count).
(getUserProfile...).
Automated Plagiarism Detection
AI-based plagiarism software monitors candidates’ keystroke rhythms and screen activity. It scores the similarity of their code to other code online or generated by AI within seconds.
Contextual Review
Instead of immediately disqualifying the candidate, it notifies the hiring manager in real time when the candidate switches tabs or pastes a large block of code. This allows the technical interviewer to ask direct questions about that code.
Behavioral Analysis
Online proctoring software analyzes not only the code but also the candidate’s problem-solving cadence (pauses, hesitations). It detects cheating by measuring the human mind’s hesitation against the machine’s straight-line code generation.
To counter advanced AI cheating and attempts to copy, you need professional infrastructure that goes beyond camera recordings and includes browser lockdown and digital forensics features.
Instead of asking candidates to write a single function, give them a small project structure consisting of 4-5 files. LLMs (large language models) lose context and hallucinate when managing broad architectures, making copying impossible.
Test how candidates manage their time and decide which task to prioritize. AI writes code quickly, but cannot prioritize tasks using the “common sense” unique to people.
Instead of asking candidates to write code, give them code that has been deliberately written inefficiently or incorrectly. Ask them to analyze (debug) the code and explain its logic.
Leading technology companies in the industry are transparently incorporating AI into the interview process rather than banning it. That’s because software developers use these tools in real work, too. The metric being measured here is not writing code from scratch, but how effectively candidates can collaborate with AI (AI-Fluency).
A candidate who gets hired by cheating with ChatGPT/Gemini/Claude in a technical interview can become a ticking time bomb within the organization. Code copied and pasted without understanding its logic can cause outages on production servers and cybersecurity vulnerabilities months later, leaving the company with enormous “Hidden Technical Debt.”
The 15-hour case assignments previously given to candidates were quite demanding. Switching to live, one-hour interactive interviews (pair programming) to prevent AI cheating has made interviews much fairer and more equitable by moving them into working hours.
There are three ways to detect it conclusively: First, the candidate’s eyes move linearly as they read text elsewhere, outside the screen. Second, large, flawless code blocks suddenly appear on screen despite no keyboard sounds being heard (a paste action). Third, secure exam systems provide alerts when the candidate switches tabs (loss of browser focus).
This process is called Code Stylometry (Stylometry). When people write code, they shorten variables (for example: count, usr_dt) and are pragmatic. AI, on the other hand, uses clinically sterile, excessively long and rigid names (for example: calculateTotalUserCount). Adding unnecessarily lengthy comments (docstrings) even for simple operations is also a key sign of AI-generated code.
Instead of single-file questions such as the classic “reverse the array,” candidates should be given a ready-made architecture consisting of 4-5 files. AI loses context in large architectures and produces incorrect results (hallucinations). In addition, rather than asking candidates to write code from scratch, they should be given flawed code and asked to fix it and explain its logic verbally.
Explore proctoring, identity verification, environment analysis and reporting workflows suited to your organization with the QProctor team.