Paste the link of the page that showed the captcha — for a free instant check ↓

Free risk-score preview · full report with all 5 red flags for $4.99 · no subscription

No link handy?
Scam check · fake CAPTCHA / malware page

Is this “verify you are human” captcha a scam?

If the “captcha” asked you to press keys or paste something, yes — it's a scam called ClickFix, and it's one of the fastest-growing attacks of 2026. A real captcha only ever asks you to tick a box or pick images. A fake one tells you to “verify you are human” by pressing the Windows key + R, then Ctrl + V and Enter — or to open Terminal and paste a command. Following those steps doesn't prove you're human; it runs a command that quietly installs malware or an info-stealer on your device.

The whole trick is to get you to run the attacker's command yourself, bypassing the protections that would normally block a download. Stop immediately: do not press those keys, do not paste anything, and close the page. No legitimate “verify you are human” step ever needs the Run box, a keyboard shortcut, or a pasted command. Paste the page's link into the free scan below to flag it — and if you already ran a command, disconnect from the internet and run a full security scan, then change important passwords from a different, clean device.

Top 5 red flags

These are the signals to watch for with this “verify you are human” captcha page. Not sure about a link involved? Our report grades every one and tells you exactly what it found.

1. It tells you to press Windows + R or open Terminal

A real captcha never needs the Run box or a terminal. Any “verify” step that does is trying to run a command on your machine.

2. It asks you to paste or type something

“Press Ctrl + V, then Enter” copies a hidden command onto your device and runs it — the core of the ClickFix malware trick.

3. A checkbox or image grid it claims “failed”

A fake prompt often says a normal captcha “didn't work” to justify the bogus keyboard-shortcut “fix.” That escalation is the scam.

4. It appeared on an unexpected or sketchy page

These fake captchas are planted on cracked-software, streaming and ad-laden pages — or injected via a hacked site — to catch people mid-click.

5. Urgency to “complete verification”

Pressure to finish the steps quickly is there to stop you realising a captcha should never ask you to run anything.

Paste the link/URL to check it now →

We check the URL/site and hand you an intelligence report — we don’t recover funds, execute takedowns, or give legal advice.

What to do right now

  1. 1Stop now — do not press any keys, paste anything, or run a command. Close the page.
  2. 2Paste the page's link into Scam Detective below for an instant risk score before you go back to it.
  3. 3If you already ran a command, disconnect from the internet, run a full security/antivirus scan, and change important passwords from a different, clean device.

Don’t risk it — check this “verify you are human” captcha page first

Spot the scam before it spots you. Get your instant risk score free, then the full report for just $4.99.

Paste the link/URL to check it now →

This page is general guidance to help you decide — not a verdict on any specific business, and not legal or financial advice. We check URLs and sites; we don’t recover funds or execute takedowns.

Related scam checks

Closely-related checks — or paste your own link for a free scan.

→Is fedexyd.com a scam?→Is tothemoongaminggifts.com a scam?→Is thatdailydeal.com a scam or legit?→Is rvupgradedepot.com a scam?→Is this fake delivery-fee text a scam?→Is sanvalier.com a scam?

Browse more: all scam checks · brand checker · vs other scam checkers · our scam verdicts.