the person is usually accused and maybe not guilty. Normaly you let them finish the exam and start the legal stuff afterwards (proof, counter arguments etc.)
It can also serve as additional proof if on the new answer sheet given after confiscating the devices, the exam taker performs significantly worse than on the original answer sheet.