The Kenya National Examinations Council (KNEC) has identified 18 active Telegram channels suspected of circulating leaked examination materials for the 2025 KCSE and Kasneb assessments. The findings are detailed in the August 2025 monitoring report, which recorded a total of 51 suspicious channels under investigation.
According to KNEC, Telegram has become the primary platform used by digital exam leak networks due to its encrypted messaging features and large audience capabilities. The Council says several of the flagged channels have thousands of followers and frequently post alleged exam papers, answer sheets and revision materials marketed as “authentic leaks.”
Officials noted that many of the materials posted on these platforms are altered, outdated or entirely fabricated. However, the circulation of even fake content poses a threat to examination credibility by creating panic among candidates and exposing them to manipulation by fraudsters.
KNEC says it is working with security agencies and digital forensic experts to trace administrators and subscribers involved in the distribution of unauthorized materials. Investigations have already led to multiple arrests nationwide, including adult candidates, teachers and suspected intermediaries.
The Council warned candidates and parents against engaging with suspicious online content, stating that possession or sharing of unauthorized exam papers is a criminal offense under the Kenya National Examinations Act. Individuals found violating the law face fines, imprisonment and cancellation of exam results.
The report also highlights the increasing commercialization of exam leaks, with some channels demanding payment—ranging from KSh 500 to KSh 3,000—for access to alleged papers. Officials say such schemes exploit desperate candidates while contributing to a broader criminal market.
Cybersecurity analysts say the scale of Telegram involvement underscores the urgent need for coordinated digital monitoring and stronger legislation targeting online examination fraud. They warn that the networks may evolve to use VPNs and foreign servers to mask their operational footprints.
KNEC has urged candidates to rely only on verified revision resources and official communication channels. The Council says it will continue monitoring digital spaces until the completion of examinations and release of national results.
