We’ve all seen those familiar little boxes on websites asking us to check “I’m not a robot” or complete a quick challenge to prove we’re human.
Most of the time, these are legitimate security checks. But scammers have found a way to use that familiar process to trick people into infecting their own computers.
It’s a scam commonly known as ClickFix, and it’s something every Windows user should know about.
How Does the Fake CAPTCHA Scam Work?
You visit a website and encounter what appears to be a normal verification screen.
It might ask you to check a box or click a button to prove you’re human.
But instead of completing the verification, the website displays additional instructions.
It may tell you to:
- Press Windows + R on your keyboard.
- Press Ctrl + V to paste a verification command.
- Press Enter to complete the process.
STOP! This is NOT a normal CAPTCHA!
Here’s what’s really happening.
The website may have secretly copied a malicious command to your computer’s clipboard when you clicked the verification button.
When you press Windows + R, you’re opening the Windows Run box. Pressing Ctrl + V pastes the command, and pressing Enter can execute it.
Depending on the attack, that command could download malware, steal saved passwords, compromise accounts, or give criminals access to your computer.
And the worst part? You might not notice anything unusual afterward.
Warning Signs to Watch For
Be extremely suspicious if a website asks you to:
- Open the Windows Run box to verify you’re human.
- Paste something into PowerShell, Command Prompt, or Windows Terminal.
- Run a command to fix a browser or security problem.
- Disable your antivirus protection.
- Follow unusual keyboard instructions before accessing a webpage.
Legitimate CAPTCHA challenges do not require you to run commands on your computer.
What Should You Do If You See One?
1. Don’t follow the instructions. Never run a command supplied by an unfamiliar website.
2. Close the suspicious webpage. Don’t continue interacting with the fake verification.
3. Don’t paste anything from the website. If the site copied a command to your clipboard, copying ordinary text afterward can replace it.
4. If you already ran the command, disconnect from the internet and seek help. Malware may have been installed even if your computer appears to work normally.
5. Protect your accounts. If you executed the command, use a separate trusted device to change important passwords, starting with your email, and review account security.
An antivirus scan is helpful, but a clean scan alone doesn’t guarantee that a computer is safe after a malicious command has been executed.
Ricmer Quick Take
If a website asks you to press Windows + R, paste something, or run a command to prove you’re human, it’s a major red flag.
Real verification challenges might ask you to check a box, select pictures, or solve a simple puzzle.
They should never require you to execute Windows commands.
Remember, scammers are counting on you to follow instructions without questioning them.
When something doesn’t seem right, stop before you click!
Need Local Help?
If you’ve encountered a suspicious CAPTCHA or accidentally followed its instructions, Ricmer Tech Support can help evaluate your computer for possible malware or unauthorized access.
Friendly local computer support for home users and small businesses throughout Blair County.
