Detection · Display tampering

Detect display tampering in remote interviews.

Selective screen capture, overlays, extra monitors, and virtual displays let a candidate present a clean shared screen while prompts and answers stay visible somewhere the interviewer can't see. Capifiq surfaces display tampering and seals it as evidence.

The threat

A clean screen share, hiding the rest.

Screen sharing only shows what the candidate chooses to share. With a second monitor, a virtual display, selective capture, or an overlay, they can present a tidy, empty screen to the interviewer while the real workspace — notes, an AI overlay, a coding assistant — sits on a display that is never shared.

What the interviewer sees is curated. What matters is on the screen they don't.

Techniques in this category

  • Extra or second monitors
  • Virtual and phantom displays
  • Selective window or region capture
  • Screen overlays on the candidate's side
  • Display-spoofing utilities
  • …and new tricks as they appear

The blind spot

Why the shared screen looks clean.

Screen sharing transmits a chosen surface by design, so anything outside it is invisible to the interviewer.

You see what they share

Screen sharing transmits a surface the candidate selects. Anything outside it is invisible by design.

Extra and virtual displays

A second or virtual monitor holds the real workspace while a clean display is the one that gets shared.

A curated view

Selective capture and overlays present content that doesn't match what is actually on the candidate's screens.

What Capifiq surfaces

  • Extra or virtual displays in use during the session
  • A mismatch between the shared screen and the candidate's actual displays
  • Overlays presenting content the share can't see
  • Cryptographically hashed, sealed evidence for review

The coverage

Caught by the displays, not the share.

Capifiq surfaces when a candidate has extra or virtual displays, or when what is shared doesn't match what is actually on their screen — revealing content they can see but the share can't.

The finding is timestamped and sealed for the interviewer to review.

Questions

Common questions.

Does having two monitors mean someone is cheating?
No. Extra displays are common and legitimate. Capifiq surfaces an extra or mismatched display as a factual, timestamped event, and a human decides what it means.
How is this different from a hidden AI overlay?
An overlay is one way to hide content; display tampering is the broader practice of curating what the screen share shows. Capifiq covers both.
Can Capifiq see the display that isn't shared?
Capifiq surfaces that a hidden or mismatched display path exists and flags it as evidence for review, without needing the interviewer to see that screen directly.
What about a new display-spoofing tool?
Coverage does not depend on the specific tool being catalogued first.

Get started

See the screen they didn't share.

Run Capifiq alongside the Zoom, Teams, or Meet calls you already do, and see what it surfaces.