By Ibukun Emiola
IBADAN — In the weeks leading up to the 2026 Unified Tertiary Matriculation Examination (UTME), Facebook transformed into a thriving marketplace for examination fraud, where desperate candidates and their parents were lured into paying as much as ₦45,000 for leaked questions and answers as well as score manipulation schemes, an investigation has found.
The investigation uncovered a coordinated network of fraudsters who openly advertise so-called “exam runs,” “exam runz”, “expo,” and “assistance” services on Facebook pages, groups and comment threads, exploiting gaps in content moderation and the platform’s recommendation algorithms.
A well-oiled digital operation
Contrary to the perception that exam malpractice operates in secrecy, findings show that perpetrators run a brazen and structured operation. Posts are often accompanied by phone numbers and links directing users to WhatsApp communities or Telegram channels, where transactions are finalised.
Once contact is established, interested candidates are presented with a price list tied to desired scores, typically ranging from ₦15,000 to ₦55,000. Payments are made through fintech accounts, after which users are promised access to “tailored” questions and answers up to 12 hours before the examination.
To gain access, candidates are required to input their UTME registration numbers on dedicated websites, a tactic experts say is likely designed to create a false sense of legitimacy and urgency.
In direct engagements with suspected operators, this reporter obtained audio recordings, videos, and supporting digitalevidence illustrating how the schemes are marketed.
In one audio conversation, a self-described operator who identified himself as “Mr Exam Prof” claimed long-standing success in facilitating exam malpractice.
“You are talking with Mr Exam Prof, the only legit exam body that can help you score nothing less than 350 in this JAMB exam. I have been doing it for the past 10 years with accurate results,” he said.
The operator also attempted to distinguish himself from competitors by warning against scams while promoting his own services.
“There are a lot of scammers… anybody that only sends you a result is a scam. Let them show you video proofs like us,” he added.
While another perpetrator identified himself as Mr Edu Genius, the account details he provided this reporter to pay, shows he goes by another name. He said he has been in the business for the past eight years and he has never recorded the failure of any of his students.
“For our assistance, questions are answered and the answers are uploaded to our website’s Questions and Answers page. All you need to do is you to enter registration number to access them. (The process is 100% safe and secured). The answers are ticked based on the score range you paid.
“We don’t do fake work here, sir I’ve been in the game for 8years + now,” he claimed.
The conversation, along with accompanying video samples and screenshots from linked websites reviewed by this reporter, shows how perpetrators combine persuasion, urgency and supposed “proof” to build trust with potential clients.
In a separate interaction, payment instructions provided by another operator were linked to a wallet run by one of the most popular digital banks in Nigeria, with the account bearing the same name he used during the conversation, suggesting a possible connection, although this could not be independently verified.
The reporter did not proceed with payment and could not verify the authenticity of the claims.
Algorithms as enablers
The investigation found that Facebook’s algorithm plays a critical role in amplifying the reach of these fraud networks. Once a user searches for keywords associated with exam malpractice, similar content begins to dominate their feed, creating a feedback loop that continuously exposes them to illicit offers.
Hundreds of pages promoting such services remain active, some repurposed across multiple examination cycles from UTME to WAEC and NECO by simply changing names or combining exam titles to attract broader audiences.
Older posts dating back to 2019 were still visible at the time of this investigation, suggesting weak enforcement and content removal mechanisms.
Analysis of more than 50 Facebook pages and groups showed that many of these accounts remain active across multiple examination cycles.
At the time of reporting, some posts dating back several years were still visible, raising concerns about enforcement gaps.
Evasion tactics and digital footprints
Phone numbers shared by operators returned no identifiable records on caller identification platforms, suggesting the use of disposable or unregistered lines.
Meanwhile, the use of fintech wallets highlights how digital payment systems are being leveraged to facilitate transactions while obscuring identities.
Experts, including Prof. Adams Onuka of the University of Ibadan and David Afolayan, the CEO of GIS Konsult, say fraudsters frequently rotate accounts, keywords, and page identities to evade detection, while encrypted platforms such as WhatsApp and Telegram provide secure channels for coordination
Methodology
This investigation monitored more than 50 Facebook pages and groups between April 7 and April 21, 2026. The transparency and history of these pages were also observed which validated the claims in this report.
The reporter joined multiple groups, observed conversations, tracked engagement patterns, and reviewed links to external websites as well as WhatsApp and Telegram channels.
Three suspected operators were directly engaged, with audio and video evidence obtained. Payment instructions linked to fintech wallet accounts were also analysed.
The reporter did not complete any financial transaction and could not independently verify the claims made by the operators.
From “expo” to “score upgrade”
The strategy of fraudsters evolves with the exam timeline.
On the first day of the 2026 UTME, April 16, several Facebook accounts posted what they described as “evidence” of having delivered questions and answers to paying candidates. By midday, such posts multiplied, accompanied by testimonials aimed at convincing others to subscribe.
However, by the second and third days after the Joint Admissions and Matriculation Board (JAMB) released initial results the narrative shifted. Fraudsters began promoting “JAMB upgrade” services, claiming they could increase candidates’ scores after the examination.
In one instance, a Facebook user posted images purportedly showing successful score upgrades, directing users to contact details and websites for further engagement.
On 21 April 2026, this reporter spoke with an alleged fraudster who claimed to have access to a system capable of directly “upgrading” UTME scores on the JAMB portal.
Attempting to lend credibility to the operation, the operator repeatedly insisted the scheme was a “three-day privilege” approved by the Federal Government to help candidates who had performed poorly.
“They are closing the upgrade tomorrow (22 April) by 10:30 a.m.,” he stated. “That is why the Federal Government gave out the opportunity for each student to upgrade this result.”
The operator explained that fees varied depending on the requested score increase, noting that a 100-point bump, from 220 to 320, would cost N11,000.
To process the change, the UTME student was to provide their registration number, seat number, email address, and phone number.
“If she pays the amount, within the space of three hours, it should be upgraded and posted on the JAMB portal,” he claimed, insisting the illicit process carried no risks.
When pressed by the reporter for further clarification, this operator said: “I don’t force people to pay. As I’m talking to you right now, I have people in my DMs whose results I’m upgrading.”
Victims and near misses
Interviews with candidates reveal how easily users are drawn into these networks.
Some admitted joining Facebook groups initially for legitimate study materials, only to find the focus gradually shifting toward paid assistance. Others said they exited such groups once the fraudulent intent became clear.
One candidate said she left after noticing the transition from tutorials to aggressive marketing of “expo,” while another admitted she saw offers as high as ₦20,000 but chose not to participate.
Miss Taiwo Akinpelu said she only “only followed the tutorials from these platforms but I didn’t pay for any assistance.”
Miss Chioma Ikechukwu said she exited the groups when the attention shifted from tutorial to campaign for assistance.
“There’s a jamb group someone added me to, I found out that’s [malpractice is] what they’re into. I left the group yesterday, April 14, 2026.
“My parents are very strict. They mustn’t even know that I was in the group before.
“There’s nothing beneficial there. They no longer send jamb revision questions again. I left to avoid being tempted to do the unthinkable.
“The least amount I saw was 20k,” she said.
Inside the enforcement gap
Despite repeated warnings by JAMB against patronising fraudsters, the practice remains widespread, raising concerns about enforcement and platform accountability.
An UTME invigilator who spoke anonymously said there were ways to ensure that there is no exam malpractice, with the use of technology and personnel.
He said adequate structures had been put in place to ensure the integrity of the exercise.
“The centre is fully equipped with surveillance infrastructure, including Closed-Circuit Television (CCTV) systems, to monitor activities during the examination.
“We have adequate structures and the exam is fully covered. The examination is monitored in real-time at the JAMB headquarters,” he said.
Also, the immediate past JAMB Registrar, Prof. Ishaq Oloyede, during a monitoring visit to CBT centres in Oyo State, dismissed claims that exam questions could be leaked or scores altered, insisting that such promises are fraudulent.
He disclosed that the board has infiltrated several fraud networks, with between five and 10 suspects already facing prosecution. In one case, a suspect continued to receive payments from parents even while in custody, highlighting the depth of desperation and misinformation driving the market.
The board has also cancelled about 100 candidate registrations linked to such schemes.
However, the investigation found that JAMB has not directly reported these Facebook pages to Meta, instead relying on law enforcement agencies to act, a gap that allows the content to remain online.
Oloyede also warned that fraudsters operate with increasing sophistication, including the use of fake identities and artificially generated images to deceive victims on platforms such as Facebook, WhatsApp and Telegram.
The registrar criticised the role of some parents in enabling malpractice, noting that financial support for such schemes perpetuates fraud and undermines merit.
“Some parents are part of the problem. They demand specific scores and fund these illegal activities,” he said.
He urged the public to report fraudulent platforms and individuals, while commending the Nigeria Police Force, the Department of State Services and the Nigeria Security and Civil Defence Corps for their collaboration in tracking and prosecuting offenders.
Expert raises red flags
Digital rights and platform governance expert, Mr John Gbadamosi, warned that the scale and persistence of these activities point to systemic failures in platform governance.
According to findings, fraudsters continuously change keywords, identities and page structures to evade detection, while encrypted platforms like WhatsApp and Telegram provide safe havens for coordination once victims are recruited.
Although fintech payment systems offer some traceability, weak identity verification and the use of multiple accounts make tracking funds difficult.
Experts also caution that claims of “personalised” exam questions linked to registration numbers are likely psychological manipulation tactics rather than actual breaches of examination systems.
“From observation, the visibility of exam malpractice adverts on platforms like Facebook reflects the limits of current content moderation systems. Many of these actors operate by constantly changing their wording, pages, and identities, which allows them to stay ahead of detection for longer than expected. It raises questions about how proactive these platforms really are in identifying and stopping such abuse before it spreads.
“The shift from open platforms to private messaging services such as WhatsApp and Telegram makes enforcement even more complicated. These encrypted environments provide a layer of protection that, while useful for privacy, is also being exploited for illegal coordination. Once users are moved into these closed groups, tracking activity becomes significantly more difficult for regulators and security agencies,” Gbadamosi said.
According to him, in addressing this challenge, examination bodies will need to go beyond traditional monitoring. The use of AI-based content detection, stronger cybersecurity frameworks, and real-time digital intelligence can help identify patterns early.
“At the same time, public education is equally important, as many students become victims due to desperation, misinformation, or peer influence.
Ultimately, this issue is not just about technology or platforms alone. It sits at the intersection of weak enforcement systems, high academic pressure, and evolving digital crime tactics.
“Any meaningful solution will require coordinated action across regulators, tech companies, education bodies, and society at large,” he said.
Lack of accountability powers this illicit economy.
While JAMB insists its examination system remains secure, the persistence of fraud networks raises critical questions about the role of tech platforms, regulators, and law enforcement agencies in curbing the menace.
Days after the initial complaint was logged nothing happened, so this reporter flagged the groups again using Meta’s shake your phone method.
This reporter further filed a complaint to Meta on examination fraudulent activities on Facebook but the pages still exist till date. In addition to that a formal complaint was sent to Meta via email.
For now, the ecosystem thrives, powered by algorithms, sustained by desperation, and enabled by gaps in oversight.
“This article was published as part of the Tech Justice and Platform Accountability Project of the Centre for Journalism Innovation and Development (CJID), with support from Luminate.”
