Scam · pretends to be Google reCAPTCHA
Fake 'I'm not a robot' paste-command trick
The real message, with personal details covered.
What happens
A fake human-check box tells people to press Windows Key + R, paste with Ctrl+V and press Enter. This secretly runs a harmful command that installs software to steal information.
Warning signs
- Asks for Windows Key + R A real 'I'm not a robot' check never asks you to open the Windows Run box on your computer.
- Asks you to paste with Ctrl+V The website has secretly put a harmful command on your computer. Pasting it and pressing Enter runs it.
- Fake verification steps Real checks only ask you to tick a box or pick pictures, not to follow keyboard steps.
- Fake 'agree' text and ID The small text with a 'Verification ID' is there to make it look official and genuine.
- Blurred page behind box The page is hidden so you only look at the fake box and do what it says.
How this scam works
- You visit a hacked or fake website, and a box that looks like a normal 'I'm not a robot' check appears.
- Without telling you, the page copies a harmful command onto your computer's clipboard.
- The box tells you to open the Run box (Windows Key + R), paste (Ctrl+V) and press Enter.
- This runs the command, which installs spying software or a virus.
- The criminals then steal passwords, bank logins and saved card details, or take control of the computer.
What to do
- Don't press any keys it tells you to. Don't click VERIFY. Close the page or browser window.
- If the page won't close, switch the computer off with the power button, then turn it on again.
- Take a screenshot or photo of the screen to keep as evidence. report it to your local police and to the website's owner if you know who they are.
- Tell your family and friends so they know about this trick.
Open this case in the scam library to like it or add a comment.