Paste the link of the page that showed the captcha — for a free instant check ↓
Free risk-score preview · full report with all 5 red flags for $4.99 · no subscription
Is this “verify you are human” captcha a scam?
If the “captcha” asked you to press keys or paste something, yes — it's a scam called ClickFix, and it's one of the fastest-growing attacks of 2026. A real captcha only ever asks you to tick a box or pick images. A fake one tells you to “verify you are human” by pressing the Windows key + R, then Ctrl + V and Enter — or to open Terminal and paste a command. Following those steps doesn't prove you're human; it runs a command that quietly installs malware or an info-stealer on your device.
The whole trick is to get you to run the attacker's command yourself, bypassing the protections that would normally block a download. Stop immediately: do not press those keys, do not paste anything, and close the page. No legitimate “verify you are human” step ever needs the Run box, a keyboard shortcut, or a pasted command. Paste the page's link into the free scan below to flag it — and if you already ran a command, disconnect from the internet and run a full security scan, then change important passwords from a different, clean device.