Be Aware of the CAPTCHA Scam

CAPTCHA — the little “I’m not a robot” check — is designed to keep websites secure by blocking bots and automated attacks. It’s something most of us trust without thinking twice.

Unfortunately, scammers are now exploiting it.

How the CAPTCHA scam works

It starts like a normal CAPTCHA. You click the box, expecting to move on. Instead, you get an error message with instructions to “fix” the issue. Those instructions are the trap.

Fake CAPTCHA pages may tell you to press certain keys, copy and paste something, or take extra steps. Behind the scenes, that can trigger a hidden command that installs malware, giving scammers access to your device, passwords, and accounts.

What to watch for

• Instructions to use keyboard shortcuts
• Requests to copy and paste text
• Prompts to download or “repair” something
• Requests to allow notifications

If it asks you to do more than click or select images, it’s not legitimate.

Remember — if something feels off, it probably is. Close the page immediately.