Case study · September 2026
Why ACCA withdrew remote exams and why the retreat is not a fix.
A 257,956-member global exam body, running 609,001 exams a year on the category-leading remote proctoring platform, concluded it could not secure them and moved them into buildings. This report sets out what ACCA published, what the regulator did in the same period, what its own disciplinary decisions reveal about the failure mechanism, and what returning to test centres actually costs.
Published 1 September 2026 · All primary sources re-verified 1 September 2026
Jump to section
Executive summary
The market's biggest concession, in five sentences.
Remote proctoring has been under pressure for years, mostly in the form of argument. This is different. It is a dated, published decision by one of the largest professional exam bodies in the world, taken with the market-leading remote invigilation platform already deployed, and taken against its own commercial interest.
This report is not a claim that ACCA endorses any alternative, and it is not a claim about the performance of any named vendor on ACCA's exams. It sets out what is on the public record, keeps each source distinct from the inferences drawn around it, and marks clearly where an argument is ours rather than somebody else's finding.
The decision in numbers
Nine figures, every one from a published primary document.
Each comes from an audited financial statement, a regulator's enforcement notice, an official disciplinary decision, or the institution's own website. Nothing on this page is estimated, and where a figure could be derived but has not been published, we say so rather than modelling it.
The scale of what moved
The enforcement running alongside it
§1/The record
What ACCA actually did
ACCA (the Association of Chartered Certified Accountants, founded 1904) withdrew remotely invigilated exams in two stages. Both are set out on its own candidate-facing FAQ page, which was still live and unchanged when we re-verified it on 1 September 2026.
| Date | What changed |
|---|---|
| 4 November 2025 | Students can no longer purchase tokens for remotely invigilated on-demand exams, except in countries where ACCA has no exam centre provision. |
| March 2026 | All session-based ACCA exams are held in centres, except in countries where ACCA has no exam centre provision. |
| Ongoing | The Professional Diploma in Sustainability continues to be available as a remotely invigilated exam in all countries. |
ACCA's own words
Three sentences from the FAQ carry the reasoning. They are quoted here exactly as published:
"As technology evolves we're concerned about the ongoing security of remote exams."
"Reducing the volume of remotely-invigilated exams helps us ensure exam integrity."
"Protecting the integrity of the ACCA Qualification will always be our number one priority."
— ACCA, FAQs on the limited availability of remote exams, verified 1 September 2026
What the chief executive said, and where
ACCA chief executive Helen Brand gave a different and more specific account to the Financial Times, reported in late December 2025. She described the sophistication of systems as outpacing the safeguards that can be put in place, said that people who want to do bad things are working at a quicker pace, and characterised remote testing as having reached a tipping point.
§2/Significance
Why this particular decision carries weight
Institutions abandon remote assessment fairly often. Most of them are small, were improvising, and never had serious controls in place. None of that applies here, which is what makes the decision worth reading closely.
| Dimension | Figure |
|---|---|
| Members / future members | 257,956 / 530,124, across 180 countries |
| Exams taken globally, 2024 | 609,001 (2023: 602,203) |
| Examinations income, FY25 | £89,435,000, up 6.7% year on year |
| Exam income as a share of total income | 35.6% of £250,883,000 |
| Remote invigilation platform | Pearson VUE OnVUE, named in ACCA's candidate guidance |
| Regulators | Ofqual and SQA, with formal obligations to prevent malpractice |
| Corporate risk register | "Failures in our end-to-end exam processes" ranked risk 3 of 9 |
So this was not a body without options or without scrutiny. It had the category-leading remote invigilation platform deployed, two regulators supervising it, and the failure mode already named on its own risk register. It also had a direct financial disincentive: examinations are more than a third of its income, and centre-based delivery constrains volume in a way remote delivery does not.
§3/Enforcement
The regulator was acting on the same failure class
On 15 December 2025, six weeks after ACCA stopped selling remote exam tokens, Ofqual fined Pearson £2,005,000 across three unrelated matters. One of the three is directly about remote invigilation.
| Component | Fine | Detail |
|---|---|---|
| PTE Academic Online | £750,000 | Other people sat the secure test on candidates' behalf, avoiding the remote invigilation safeguards Pearson had put in place. 9,910 results revoked. The test is now discontinued. |
| GCSE English Language 2.0 | £750,000 | Separate matter, unrelated to remote invigilation. |
| A Level Chinese | £505,000 | Separate matter, unrelated to remote invigilation. |
— Ofqual, 15 December 2025, verified 1 September 2026
The significant phrase is that the impersonation avoided safeguards that were in place. This was not an unproctored test. Controls existed, and candidates got past them at a scale that took nearly ten thousand results with it.
Enforcement is escalating
| Date | Organisation | Fine | Scale of impact |
|---|---|---|---|
| Jun 2026 | Cambridge English (IELTS) | £875,000 | 62,794 candidates affected |
| Dec 2025 | Pearson (three matters) | £2,005,000 | 9,910 results revoked on PTE alone |
| Jul 2025 | WJEC | £350,000 | ~1,500 GCSE students given wrong results |
| Jul 2024 | NCFE | £300,000 | ~1,200 T Level results withdrawn |
| Mar 2024 | City & Guilds | £200,000 | Repeat breaches |
| Total | Five actions | £3,730,000 |
In July 2026 Ofqual went further and barred BIIAB from enrolling new learners on security qualifications. That is an existential sanction rather than a financial one, and it signals that the regulator now treats assessment security failures as something other than a cost of doing business.
And the regulator has named the threat directly
- Artificial intelligence, malpractice and assessment (advice note, 27 April 2026) ties AI malpractice to General Conditions A6 on risk identification and A8 on preventing malpractice, and names delivery method, supervision level and device access as vulnerability factors.
- Ofqual's approach to regulating the use of AI in the qualifications sector (republished 16 July 2026) explicitly names remote invigilation as a priority AI use case and commits Ofqual to stronger authentication requirements.
- Malpractice in GCSE, AS and A level: summer 2025 records AI misuse rising from 55.4% to 75.0% of all plagiarism cases in a single year, mobile phones accounting for 44.3% of student malpractice, and staff malpractice cases up 90%.
§4/Failure mechanism
How the proctoring actually failed
ACCA publishes its Disciplinary Committee decisions, and two from 2025 describe the failure mode precisely. Both concern live, remotely invigilated exams. We have not reproduced the candidates' names: they are identifiable individuals, ACCA publishes those decisions as a regulator exercising its own functions, and the evidential value here lies entirely in the mechanism rather than in who was involved. The linked decisions carry the full detail.
| Decision | What happened | Outcome |
|---|---|---|
| 25 June 2025 | Remote Financial Accounting exam, 24 August 2024. The candidate showed the invigilator a phone placed "out of reach." Video review later revealed a second, concealed device and finger movements roughly 31 minutes in. | Removed from the student register; £8,500 costs |
| 11 September 2025 | Remote Advanced Audit & Assurance exam, 3 June 2024. The candidate told the proctor the object was "his mouse" and that "There isn't any phone." A second phone was later identified. | Removed from the register; £6,800 costs |
The webcam defines a frame. Everything the candidate needs sits outside it. A phone below the desk, a second laptop to the side, a tablet on a stand behind the monitor: none of these are exotic, and none of them require the candidate to defeat the proctoring software at all. They simply require the proctoring software to be looking at one thing while the candidate uses another.
The rules had not caught up either
There is a second, quieter gap. ACCA's Exam Regulations contain no clause naming artificial intelligence, generative AI, or LLM tools. AI use has to be prosecuted under the generic "unauthorised materials" and "electronic devices" headings. ACCA's published list of student misconduct types (cheating, collusion, contract cheating, impersonation, misrepresentation, plagiarism) does not include AI use as a category at all.
This is not a criticism unique to ACCA; most exam regulations in circulation were written before the tools existed. It does mean that an institution relying on rules alone is enforcing against a category its own rulebook does not define.
§5/Base rates
The profession's own exam record
One objection to everything above is that it is a story about students, and students are a special case. The record does not support that. The accountancy profession has paid $197,900,000 across 13 published regulatory actions for cheating on internal training and certification exams. These were not candidates. They were audit professionals at the largest firms in the world.
| Date | Firm | Regulator | Fine |
|---|---|---|---|
| Jun 2022 | Ernst & Young LLP (US) | SEC | $100,000,000 |
| Jun 2019 | KPMG LLP (US) | SEC | $50,000,000 |
| Apr 2024 | KPMG Accountants N.V. (Netherlands) | PCAOB | $25,000,000 — a record PCAOB fine |
| Dec 2023 | PwC China / Hong Kong | PCAOB | $7,000,000 |
| Jun 2025 | Deloitte Netherlands | PCAOB | $3,000,000 |
| Jun 2025 | PwC Netherlands | PCAOB | $3,000,000 |
| Feb 2025 | PwC Israel | PCAOB | $2,750,000 |
| Jun 2025 | EY Netherlands | PCAOB | $2,500,000 |
| Dec 2023 | PwC Canada | CPA Ontario | $1,450,000 (fine + costs) |
| Apr 2024 | Deloitte Indonesia | PCAOB | $1,000,000 |
| Apr 2024 | Deloitte Philippines | PCAOB | $1,000,000 |
| Feb 2022 | PwC Canada | PCAOB | $750,000 |
| Sep 2021 | KPMG Australia | PCAOB | $450,000 |
| Total | 13 actions | $197,900,000 |
The scale inside those cases
- KPMG Australia: more than 1,100 employees involved; 1,131 individuals disciplined internally.
- PwC Canada: more than 1,200 professionals; answers to 46 of 55 mandatory tests shared via network drives and email.
- KPMG US (SEC, 2019): staff manipulated the exam server's passing-score threshold, and some candidates "passed" with under 25% of answers correct.
- KPMG Netherlands and EY US: penalties aggravated in both cases for misleading the regulator's investigators.
§6/The bill
The retreat costs more than it saves
Moving candidates back into buildings does close the specific gap that remote proctoring could not. It is also expensive, exclusionary, and, for an exam body, structurally awkward in a way that shows up directly in its own accounts.
It costs more
| Buyer | Spend | Comparison |
|---|---|---|
| General Medical Council | £13,500,000 to the British Council | Within a £19.25m six-year venue-and-invigilation contract |
| University of Derby | £400,000 + £90,000 for agency exam invigilators | Against £102,960 for Turnitin — roughly 4.8× more for humans in rooms than for its integrity software |
| Market rate | $13–$30 per session-hour, live human proctoring | Against $3–$10 per session-hour for automated proctoring |
It excludes candidates
Reported ACCA student impact includes 280-mile round trips within the UK, with centre gaps in Northern Ireland, Devon, Cornwall and Surrey. Every mile of that is a candidate who might not sit, and the effect is not evenly distributed: it falls hardest on candidates who are rural, working, caring for someone, or without a car.
And volume is the variable the finances rest on
ACCA's own going-concern disclosure sets out what happens if exam volume falls far enough. The reverse stress test, built to identify the conditions under which ACCA would exhaust its financial reserves, required a 60% reduction in exam volumes; in that scenario ACCA depleted its cash reserves in October 2026.
Sixty per cent of exam income is £53.7m. In the same year, operating surplus fell 93%, from £13,933,000 to £914,000, as strategic investment rose 59% to £40.2m.
This is why the retreat reads as a stopgap rather than a settlement. It was adopted because the alternative on offer, trusting an unmanaged device with a camera pointed at it, had stopped being credible. It is not obviously stable, and nobody involved has claimed it is permanent.
§7/The third option
What would have to be true for remote to work
The failure documented above is specific, and worth stating precisely: remote proctoring watches the candidate, and the second device sits outside the frame. The camera is not defeated. It is simply pointed at the wrong thing, and no improvement in what it observes closes a gap that exists by definition outside its field of view.
That suggests a different requirement. For remote assessment to be defensible, the candidate's environment has to be constrained rather than observed, and the constraint has to be enforced somewhere the candidate does not control.
| What failed | What closing it requires |
|---|---|
| The second device sits outside the webcam's frame | Enforcement at the OS and network layer rather than the visual one, so the path to an AI service is closed regardless of which device asks for it |
| Detection produces suspicion, adjudicated months later | A deterministic outcome during the session: either the path is open or it is not |
| Retreating to centres costs roughly 4–5× more and excludes candidates | Enforcement that runs on the candidate's own device, wherever they are |
| Video proctoring accumulates footage that can leak | An approach that never records the candidate, so there is no footage to lose |
That is the architecture Aiseptor builds: network-layer enforcement covering 25+ attack vectors including remote-access tools, virtual machines, on-device LLMs and invisible overlays, deployed on the candidate's own device in about 30 seconds, with no webcam, no keystroke logging and no screen recording. To date it has run in three signed pilots with assessment platforms, and in two live runs of 100+ candidates each at Cornell University.
§8/Method
Methodology, exclusions and sources
Every figure on this page comes from an audited financial statement, a regulator's published enforcement notice, an official disciplinary decision, or the institution's own website. Nothing is estimated. Where an inference is ours rather than a published finding, it is marked in the body of the report.
What we deliberately excluded
- The €200,000 Italian proctoring GDPR fine. The Garante fined Bocconi University €200,000 in 2021 over proctoring software, but the Court of Milan substantially accepted the university's appeal and reduced the fine to €10,000, holding that the image collection was not biometric processing. Quoting the original figure without that history would be misleading, so we have left it out.
- The KPMG Canada $700,000 PCAOB fine (March 2025). That action concerns inaccurate Form AP filings, not exam cheating. It appears alongside the genuine cases in search results and is excluded from the $197.9m total.
- Any remote-versus-centre volume split for ACCA. ACCA has never published one, so the exact number of sessions relocated by this decision is unknown and we have not modelled it.
- Any count of AI-cheating cases behind the decision. No source, ACCA's own included, has published one. The decision itself is the evidence, not a case count.
- ACCA's aggregate disciplinary totals. The 752 complaints and 148 concluded Disciplinary Committee cases reported for 2024 span all conduct types, including CPD defaults, ethics and PER breaches. ACCA does not publish exam malpractice as a separate category, so we cite the individual decisions instead.
Primary sources
ACCA: FAQs on the limited availability of remote exams · Exam Regulations · What is student misconduct · Financial statements FY2025 (PDF) · Disciplinary Committee decisions 2025
Ofqual: Pearson £2m fine · Cambridge English £875k fine · BIIAB enrolment bar · AI, malpractice and assessment advice note · Approach to regulating AI in qualifications · Malpractice in GCSE, AS and A level: summer 2025
SEC, PCAOB and CPA Ontario: SEC 2022-114 (EY) · SEC 2019-95 (KPMG) · PCAOB record fine, KPMG Netherlands · PCAOB, Netherlands member firms · PCAOB, Deloitte Indonesia and Philippines · CPA Ontario, PwC Canada
Other: Have I Been Pwned, ProctorU breach · The Accountant Online · AccountingWEB
Spotted an error? Our editorial policy sets out how we handle corrections, and hello@aiseptor.com reaches the author directly.
Frequently asked questions
Why did ACCA stop offering remote exams?
ACCA's published explanation is exam security. Its own FAQ page states: "As technology evolves we're concerned about the ongoing security of remote exams," and "Reducing the volume of remotely-invigilated exams helps us ensure exam integrity." ACCA's website does not name artificial intelligence as the cause. The AI framing comes from chief executive Helen Brand in a Financial Times interview, reported in late December 2025, in which she described the sophistication of systems as outpacing available safeguards.
When did ACCA move its exams to test centres?
In two stages. From 4 November 2025, students could no longer purchase tokens for remotely invigilated on-demand exams. From March 2026, session-based exams moved into physical centres. Both changes carry the same exception: countries where ACCA has no exam centre provision.
Are any ACCA exams still available remotely?
Yes. ACCA's FAQ names two carve-outs: countries with no exam centre provision, and the Professional Diploma in Sustainability, which ACCA states will continue to be available as a remotely invigilated exam in all countries.
Which remote proctoring platform did ACCA use?
Pearson VUE OnVUE, named in ACCA's own candidate guidance for remotely invigilated computer-based exams. ACCA has not published any statement attributing its decision to the performance of a specific vendor, and this report does not claim one.
How many exams does the change affect?
ACCA reported 609,001 exams taken globally in 2024, across 180 countries. ACCA has never published a split between remotely invigilated and centre-based exams, so the precise number of sessions relocated by the decision is not publicly known.
Does moving exams back to test centres solve AI-assisted cheating?
It removes the unmanaged candidate device from the exam, which is the specific gap remote proctoring could not close. It does so at a cost: published procurement figures put human invigilation at roughly four to five times the cost of integrity software, and candidate travel distances rise. It also constrains volume, which for an exam body is the variable its finances depend on.
How to cite this report
Cite it, quote it, argue with it.
This report is free to quote with attribution. If you are citing a figure that originates with ACCA, Ofqual, the SEC or the PCAOB, please cite them directly using the primary links in §8 rather than citing us as the source.
Aggarwal, A. (2026). Why ACCA Withdrew Remote Exams, and Why the Retreat Is Not a Fix. Aiseptor Research. https://aiseptor.com/research/acca-remote-exams
About the author
Founder & CEO, Aiseptor
Akshay Aggarwal
10 years in offensive cybersecurity and bug bounty research; $300,000+ in awarded bounties from major platforms. Authored Aiseptor's network-layer enforcement architecture. Leads primary research on kernel-level assessment security. Cornell University.
Related research
Continue reading
Dataset
AI Cheating Statistics 2026
The rates behind the retreat: fraud rates, tool ecosystems, and why every detection method has a documented bypass.
Read →Comparison
Pearson OnVUE and the network layer
What OnVUE covers, what sits outside the browser sandbox it controls, and where the two architectures meet.
Read →Research hub
All research
Primary-source research on AI-assisted cheating, assessment fraud, and network-layer prevention architectures.
Read →The third option
Neither a camera nor a building.
If you are weighing the same decision ACCA made, the useful question is not whether remote proctoring can watch more carefully. It is whether the candidate's device can be constrained at all. Book a 30-minute call and we will show you the enforcement running live on a candidate machine, including the second device that sits outside the webcam's frame.