Industry2026-05-08·9 min read

When the Invigilator Leaks the Paper: India's Insider Threat Problem

An MP Board invigilator photographed the Class 10 English question paper and posted it to WhatsApp status during the exam. The case exposes a threat that encryption and surveillance cannot fully address.

When the Invigilator Leaks the Paper: India's Insider Threat Problem

The Leak That Came From Inside the Hall

On February 17, 2026, a government higher secondary school in Tukaithad, Madhya Pradesh, was hosting the Class 10 English board examination. The invigilator assigned to the hall was Rajkumari Soni, a primary school teacher deployed for the exam duty. At some point during the exam, Soni photographed the question paper and uploaded it to her WhatsApp status.

The image circulated immediately. Students and parents in the network could see it. The Madhya Pradesh Board of Secondary Education (MPBSE) was notified, authorities were called, and Soni was booked. By the afternoon, the incident was reported across regional news outlets.

What made this case notable was not its scale — a single WhatsApp status post is far less damaging than the organised Telegram networks that have distributed papers to hundreds of thousands before exam day. What made it notable was its simplicity. No technology failure. No external gang. No pre-arranged coordination. One person with a phone, inside the examination hall, during the exam.

The Geography of Failure

India's exam paper security apparatus has, in recent years, focused heavily on the pre-distribution pipeline. Encrypted question papers, tamper-evident seals, time-locked digital delivery to registered exam centres, CCTV at storage points, police escort during transportation — these are the interventions that have absorbed the most investment and attention following the NEET 2024 scandal.

Those interventions are meaningful. But they are designed for a specific threat model: an external party breaching the pipeline before the paper reaches the exam hall. The Tukaithad case is a different threat model entirely.

Once a question paper is inside an examination hall, it is necessarily accessible to people in that room. Invigilators must see the paper to verify its integrity. The threat surface at that moment is every phone in every invigilator's pocket.

Rajkumari Soni is not an outlier in terms of opportunity. Every invigilator at every centre across every state board examination has the same opportunity. The question is not whether the window exists — it always does — but whether the institutional and procedural controls make exploitation costly enough to deter it.

How Widespread Is the Insider Leak Problem?

The Tukaithad case is documented and verified. But it almost certainly represents a fraction of similar incidents. Most phone-based leaks go unreported because:

  • The paper circulates within a small WhatsApp or Telegram group before significant damage is detected
  • Exam authorities prioritise continuity over investigation when incidents occur close to exam time
  • Proving that a specific image originated from a specific exam centre requires forensic work that most state board investigation units are not equipped to do
  • Invigilators who leak papers rarely do so in exchange for money, making the transaction harder to trace
  • The MP Board's own records show that 19 individuals were suspended in connection with exam irregularities in the 2026 season — a number that suggests Tukaithad was not an isolated case.

    What Structural Fixes Actually Exist

    The temptation after every insider leak incident is to add surveillance. More CCTV. Phone jammers. Signal blockers. Metal detectors at invigilator entry points. These measures address the symptom — phones in exam halls — without addressing the cause, which is that the question paper as a physical object must be printed and distributed hours before the exam begins.

    The structural fix for insider leaks at the question paper distribution stage is different from fixing evaluation-stage fraud. The two are often conflated in policy discussions but they involve different points in the examination lifecycle.

    Digital Question Paper Delivery to Exam Centres

    Several boards, including CBSE and certain state boards, are moving towards time-locked encrypted delivery of question paper PDFs to exam centre principals' devices. Under this model, the paper cannot be decrypted until T-minus 30 minutes before the exam. There is no physical paper packet to photograph at 6 AM. The window of exposure is compressed to the thirty minutes of printing at the exam centre itself.

    This model does not eliminate the invigilator threat but it narrows it. There is no sealed envelope to open at 5 AM. There is no pre-exam handling by transport staff. The invigilator who wants to leak the paper must act during the exam itself, with students present, under CCTV, which dramatically increases detection risk.

    Strict Phone Prohibition Enforcement

    The standard prohibition on phones in examination halls is unevenly enforced across India. In some states, invigilators are explicitly permitted to carry phones for emergency communication. Standardising strict phone-free zones for all examination personnel — not just students — requires both policy change and a credible enforcement mechanism for emergencies (a dedicated landline at each centre, for example).

    Rotating Invigilator Assignments

    Teachers who invigilate at their own or affiliated schools have social incentives — student, parent, or local community pressure — that outside invigilators do not. Random rotation of invigilators across centres is a well-documented deterrent but it is logistically demanding and adds travel cost. Several states that implemented rotation after major leak incidents saw measurable reductions in pre-exam paper circulation.

    The Evaluation Side of the Same Coin

    The Tukaithad incident and the broader paper leak problem are sometimes used to argue that digital transformation in examination systems is ineffective — if invigilators are leaking papers, what does OSM accomplish?

    The argument confuses two distinct stages of the examination lifecycle. Paper leaks occur at question paper distribution, weeks or hours before the exam. Digital evaluation (on-screen marking) operates at the post-exam answer script checking stage. The two systems address different failure modes.

    An institution can have excellent digital evaluation of answer scripts and a compromised question paper distribution chain. It can also have secure question paper delivery and fraudulent manual evaluation. The pathologies are independent.

    What end-to-end digital examination management — covering question paper generation, secure delivery, digital answer scripts, and on-screen marking — accomplishes is the elimination of physical handling at each stage. The fewer physical handoffs exist in the chain, the fewer insider threat windows there are. Digital evaluation is one component of that larger architecture.

    The Public Examinations Act 2024 and Accountability

    The Public Examinations (Prevention of Unfair Means) Act 2024 introduced criminal penalties for examination fraud at the central level, with state-level equivalents following. Under this framework, an invigilator who leaks a paper faces imprisonment of up to three years, with enhanced penalties if the accused is a public servant — which Rajkumari Soni was, as a government schoolteacher.

    The deterrence effect of the Act depends entirely on the rate and speed of prosecution. If invigilators observe that colleagues booked under similar provisions face no trial outcome within three years, the deterrence collapses. The accountability mechanism exists on paper. Making it work in practice is a question of institutional follow-through.

    Lessons for Examination Administrators

    The Tukaithad case offers three clear lessons for state boards and universities designing examination security for 2027:

    First, threat modelling must include insiders. Security planning that assumes the threat is always external — an organised gang, a printing press employee, a courier — will consistently miss the invigilator-with-a-phone scenario. Internal threat modelling requires different controls.

    Second, paper print-and-distribute is the highest-risk stage. The window between paper printing at the exam centre and question distribution to students is the moment of maximum insider access with minimum surveillance. Compressed digital delivery shortens this window.

    Third, deterrence requires visible consequences. Every exam season, multiple individuals are booked or suspended for paper-related misconduct. The conviction rate is far lower. Boards that publish the outcomes of disciplinary and legal proceedings — not just the arrests — send a more credible deterrence signal than those that stop at the FIR.

    Related Reading

  • Chhattisgarh Board Hindi Paper Leak 2026: What Went Wrong
  • Public Examinations Act 2024 and Digital Evaluation Compliance
  • Fake Paper Leak Misinformation: How Boards Are Fighting the Signal Problem
  • Ready to digitize your evaluation process?

    See how MAPLES OSM can transform exam evaluation at your institution.