Fake CAPTCHA Screens Trick People Into Installing Malware With Keyboard Commands
The FTC is reporting a phishing scam that mimics the CAPTCHA verification screens you see on websites daily. The fake screen looks like a standard human verification — asking you to prove you are not a robot — but instead of selecting images or typing characters, it instructs you to press keyboard commands like "Windows + R," then "Ctrl + V," then "Enter."
Those commands open the Windows Run dialog, paste hidden malware from your clipboard, and execute it. Once installed, the malware can steal email logins, mobile banking credentials, and any other information accessible on your device. Real CAPTCHAs will never ask you to run commands, open programs, or download files.
What to look for
- A CAPTCHA-style screen that asks you to type keyboard commands (like "Windows + R" or "Cmd + Space") instead of selecting images or typing characters
- Instructions to paste and run code, open a Run dialog, or download a file as part of "verification"
- A CAPTCHA prompt that appears on a website you did not navigate to directly
- Anything downloading to your device after responding to a verification screen
What to do
Close the tab immediately. If something downloaded, disconnect from the internet, run a security scan, and change your passwords from a different device.