Choosing which English test to accept is an important decision for any institution. The results influence admissions decisions, student journeys and long-term outcomes.
So, what happens if a score is achieved through fraud, impersonation or malpractice?
In these cases, it may not accurately represent a candidate’s true ability. This can lead to students being admitted without the necessary language skills. This creates challenges for staff including additional support needs. It also potentially impacts student success and can affect trust in your decisions and institution.
While cheating isn’t new, it is always evolving – often faster than institutions can keep up.
Fraudulent certificates, fake verification websites, impersonation and organised cheating services are just some ways people try to game tests. Higher education institutions are by no means immune to this, and the scale of the challenge globally should not be underestimated.
Robust test security has always been vital, but as threats evolve, maintaining high standards is a key priority.
What is test security?
Test security is about protecting the integrity of the entire assessment process – from creating materials to delivering tests to awarding results and verifying scores.
Security is all about layers. No one thing stops all cheating.
Strong security relies on multiple, combined approaches to prevent, detect and respond to threats. This helps ensure that test results remain fair, reliable and useful for institutions and students.
A secure test should protect against and detect risks like:
- Attempts to access test content
- Impersonation and identity fraud
- Organised cheating operations
- Attempts to use hardware or software to cheat
- Attempts to tamper with results
The security landscape is also constantly changing, so test providers must continually innovate, research new threats and review security measures.
How IELTS ensures test security
With all the above in mind, IELTS takes a layered, ‘defence-in-depth’ approach to test security. This relies on multiple, overlapping protective measures. So if someone gets through one security control, others are already in place to prevent a breach.
Here’s what we recommend institutions look for when assessing test security with a view to choosing which tests to accept:
End-to-end security
Security does not begin and end on test day. It applies across the entire assessment lifecycle, from the moment test content is commissioned and created to when results are released and verified.
Access to IELTS test materials, systems and processes is tightly controlled and continuously monitored. Dedicated security teams oversee operational security, regularly reviewing procedures and testing for vulnerabilities to ensure that protections remain robust as threats evolve.
Security of test materials
One of the biggest risks is prior knowledge of test content or candidates attempting to access content before test day.
To combat this, IELTS secures the entire content creation and item banking process. This includes strict controls over who can access materials at every stage. Digital delivery and large item banks reduce the risk further by ensuring no two test takers see the same questions. Automated test construction also means we can produce test versions on test day, allocating questions at the last minute before the test.
These measures make it impossible for test takers to benefit from prior knowledge. Even if someone did succeed in accessing content in advance, it wouldn’t benefit them on test day, as they cannot predict which questions they will see.
Examiner, staff and test centre integrity
Security also depends on people and test environments.
All IELTS test centres follow established procedures to provide secure and consistent testing conditions. All centres in the global network are closely monitored through audits, data reviews and ongoing intelligence checks to identify risks and maintain standards.
Staff play an important role too. Test Administrators and Examiners are trained and supported to follow secure processes and report potential issues like attempted bribery or threats. Test centre staff are also trained to identify suspicious behaviour during the test.
This creates a controlled environment where every test taker has a fair opportunity to demonstrate their skills.
Identity verification and test-day security
Common threats to test security include impersonation and fake identities. To combat these, IELTS uses leading identity verification technology and processes. This ensures the integrity and fairness of every test.
IELTS uses layered identity checks before and on test day. All IELTS test takers must present a valid identification document (ID) when they register for the test. This is submitted to our identity verification platform for validity and anti-fraud checks. On test day, they must bring the same ID to the test centre. Trained staff and secure systems carefully check their ID to confirm each test taker’s identity matches their registration details.
This ensures each test taker is a real person – and that they are who they say they are.
Additional safeguards are in place to detect and prevent impersonation. Test takers are required to take a photo, which is checked using biometric technology to help detect impostors and repeat offenders.
These measures help protect test takers, maintain trust in results and ensure scores reflect test-taker ability – not fraud, impersonation or malpractice.
To learn more about IELTS’ tech-enabled, human-led approach, see Using technology to restore trust in testing.
Results integrity and verification
Our security processes don’t end when the test does. We run multiple security checks before releasing results to ensure the accuracy and integrity of each one. When necessary, we don’t release results until further investigation. This safety net ensures we detect misconduct and that institutions can rely on the results they receive.
We also offer an easy-to-use IELTS Results Service, which we recommend institutions use. It includes results verification, results data downloads and API integration, so you never have to rely solely on documents provided by applicants. Since websites can also be faked, we recommend always using the test provider’s link to ensure you’re accessing the genuine service.
Results security is a topic in its own right, which we’ll explore in an upcoming article on Maintaining trust in English test scores for high-stakes decisions.
Data, intelligence and analysis
Data is key to protecting the integrity of results at scale.
IELTS continuously gathers and analyses intelligence from all over the world. Expert teams with specialised skills in data analysis and security research oversee this work. They’re looking for patterns or issues of concern across cohorts, countries, centres, modalities and a range of different reference points. This includes detecting anomalies across individuals, regions and wider groups that might indicate coordinated malpractice. The findings feed directly back into decisions on test scores, test centres, delivery modes and protective measures.
Thanks to IELTS’ extensive experience and the volume of tests we deliver each year, we have a large data set. This facilitates the identification of issues and warning signs that are typically harder to detect with small data sets.
Ongoing research and innovation
As threats evolve and become more sophisticated, it’s essential to keep pace with them.
That’s why IELTS security teams proactively model emerging cheating methods and evolving threats. IELTS test partner Cambridge University Press & Assessment has a dedicated team focused entirely on IELTS security, who work closely across the Partnership with security experts in IDP and British Council, to manage incidents and innovate to address future threats. We also have a dedicated Security Lab which actively tests new ideas, the robustness of new protections and ways to game the system.
This combined, proactive approach helps ensure robust security in an ever-changing world.
Protecting against organised groups
It may be the individual test taker who submits a fraudulent result, but there may be a commercially run malpractice scheme behind them. These schemes often have links to organised crime, bribery and intimidation.
Sadly, people using these services may find their association with these organisations doesn’t end after they get their results. In fact, they may remain vulnerable to ongoing exploitation such as extortion or threats of exposing their actions, potentially continuing well past university enrolment.
Understanding the scale and organisation of these threats makes a layered security approach even more important. It’s precisely that approach that ensures security for IELTS and those who rely on the results to make high-stakes decisions.
IELTS: choose a test you can trust
A secure English test protects the high-stakes decisions that shape futures and reputations of institutions. Robust security means you can trust that results reflect genuine ability – not fraud, impersonation or malpractice.
As Claire McCauley notes, there’s no quick fix for test security. It’s about combining expertise, technology, data, and continuous innovation to protect test takers and institutions.
When choosing an English test, always look beyond the result itself. By understanding the systems, people and processes behind that result, you’ll be better placed to know whether you can trust it.
For more on understanding tests, see our helpful language assessment literacy guide.