Hey there, internet adventurers! Ever been asked to prove you’re not a robot by selecting all images with traffic lights or typing out some squiggly letters? That’s a CAPTCHA, and it’s your friendly neighborhood internet security guard. But guess what? Scammers have found a way to make even this trusty friend a fiendish foe! Here’s how you can spot a fake CAPTCHA before it turns your device into a hacker’s paradise.

When CAPTCHA Gets Crafty

Picture this: you’re browsing a website, minding your own business, when BAM! A CAPTCHA pops up. Only this time, instead of asking you to identify blurry street signs, it asks you to type in some sketchy commands like “Windows + R,” “Ctrl + V,” and “Enter.” Uh-oh, that’s your cue to run for the hills! Following those instructions is like giving your keys to a stranger who promises to “just wash your car.” Spoiler alert: they’re driving away with your precious data!

Real vs. Fake CAPTCHA

Here’s the golden rule: Real CAPTCHAs will never, ever, ask you to run commands on your device. If you find yourself typing out some secret code, stop immediately! That’s a scammer trying to sneak malware onto your device, which could give them access to your email, banking info, and more. Yikes!

Oops, I Did It Again—Now What?

If you accidentally followed the fake CAPTCHA’s instructions, don’t panic! Here’s how to kick those cyber baddies to the curb:

  1. Disconnect from the Internet: This cuts off the scammer’s access to your online accounts faster than you can say “cybersecurity.”

  2. Run a Security Scan: Use your antivirus software to hunt down and remove the malware. Consider it your device’s detox session.

  3. Update Your Software: Keep your apps and software up to date to catch any sneaky viruses lurking in the shadows.

  4. Change Your Passwords: Use a different device to update your passwords and enable two-factor authentication. It’s like giving your accounts a shiny new lock and key.

Be a Scam Spotter

If you spot a CAPTCHA that seems fishier than a tuna sandwich left in the sun, report it to the FTC at ReportFraud.ftc.gov. Every report helps catch these digital delinquents!

Stay savvy, folks, and remember: if a CAPTCHA starts acting weird, it’s probably just a craptcha in disguise!

For more details, check out the original article at FTC Consumer Information.

Original article: https://consumer.ftc.gov/consumer-alerts/2026/06/how-spot-captcha-scam