Industry Brief

Ghost coders and interview-as-a-service: the fraud model behind the headlines

Recruiters are no longer only fighting a candidate with ChatGPT open. Organized networks sell proxy interviews, remote-desktop “ghost coding,” and AI cheating apps that take over assessments. This guide explains the fraud model and the integrity controls that actually interrupt it.

Back home

01

The three fronts of modern hiring fraud

Public comments from assessment-platform leaders in 2026 describe a consistent triad: leaked questions, AI-assisted tools during tests (including named apps such as Cluely and Interviewman), and outright impersonation where someone else takes the assessment. HackerRank has described flagging about 30–35% of sessions with at least one suspicious behavior, with AI-powered cheating apps as a major driver. Ghost coding sits at the intersection-another person or tool produces the work while the enrolled candidate performs on camera.

  • Leaked or shared assessment content
  • Stealth AI apps and invisible overlays
  • Proxy candidates and remote-desktop handoffs
  • Wearables and second-device coaching

02

What “interview-as-a-service” looks like operationally

A candidate pays a network. A stronger engineer joins via remote desktop or coaching channel. The enrolled face stays on webcam. Screen share may look normal. Timing, input patterns, environment signals, and ownership probes are where the story breaks. Browser-only lockdown rarely sees the remote-control layer.

03

Why moving off “browser-only” assessments helps-but is not enough

Companies are shifting away from pure browser assessments toward AI-powered proctoring that watches webcam, audio, and screen activity. That raises the bar for casual cheaters. Determined networks still use second devices, earpieces, and overlays engineered to look clean. You need assistance-pattern detection plus human evidence review-not only a locked browser.

Integrity gate

Threats get intercepted. Genuine candidates pass through.

A four-scene integrity loop: live session, anomaly detection, layered interception, and verified pass—built for AI-era cheating.

  • Device & session
  • Behavior & language
  • AI assistance
Honrly integrity
Session live
Candidate sessionLive

“When a renewal was at risk, I called the customer the same day and owned the save through Q3…”

Response · 00:14:22
Integrity watch
  • Identity checkok
  • Device postureok
  • Response cadenceok

Hiring pipeline

Without a gate, risk flows into every hire. With Honrly, it doesn't.

Watch one hiring wave: intake, unchecked advance, gated interception, then a shortlist built only from verified sessions.

Candidate stream
Intake
Hiring wave · CSM6 sessions
A. Chen
Ownership 5
In queue
R. Okonkwo
AI assistance
In queue
M. Patel
Judgment 4
In queue
J. Rivera
Hidden overlay
In queue
S. Kim
Evidence 5
In queue
T. Brooks
Paste burst
In queue

Integrity layer

Signals you can review—not a vague risk score

From live feed to flagged event to human resolution—every integrity decision leaves an audit trail.

Integrity timeline
Live feed
Monitoring
  • Identity check
    00:01:02
    clear
  • Hidden overlay
    00:12:04
    flagged
  • Assistance pattern
    00:18:41
    review

Workflow

Integrity in the assessment loop

Detection and evidence review sit alongside scoring—not as a bolted-on afterthought.

Assessment loop
Select
Role · Customer Success Manager
Customer empathy
30%
Ownership
25%
Communication
20%
Adaptability
15%
Conflict resolution
10%

04

Detection signals that generalize

Do not bet the program on a single process name. Look for remote-control indicators, anomalous assistance patterns, identity mismatches, and response ownership failures under follow-up. Composite evidence beats a binary “cheater” label. Reviewers need timelines they can defend to legal and campus partners.

05

Break the business model with process design

Rotate problems. Require live ownership of submitted code. Use multi-stage corroboration with different interviewers. Add verified behavioral assessments that probe judgment under ambiguity-work ghostwriters struggle to sustain. Fraud networks optimize for predictable, leakable formats; change the format and the unit economics of cheating collapse.

06

Operator playbook when you suspect a ghost coder

Pause advancement. Open the evidence packet. Run a structured ownership probe or supervised retest. Document the decision. Do not publicly accuse based on a single ambiguous cue. Fair process protects honest candidates and preserves your ability to act on clear fraud.

FAQ

Frequently asked questions

Someone else-or a remote operator-produces assessment or interview work while the enrolled candidate appears to be the one performing, often via remote desktop or covert coaching.

Next step

Seeing proxy or ghost-coder patterns in your funnel?