{"id":21425,"date":"2026-06-10T15:23:57","date_gmt":"2026-06-10T19:23:57","guid":{"rendered":"https:\/\/www.psafe.com\/en\/blog\/?p=21425"},"modified":"2026-06-10T15:52:54","modified_gmt":"2026-06-10T19:52:54","slug":"fake-captcha-is-installing-malware-on-your-phone-how-to-spot-it-before-you-tap","status":"publish","type":"post","link":"https:\/\/www.psafe.com\/en\/blog\/fake-captcha-is-installing-malware-on-your-phone-how-to-spot-it-before-you-tap\/","title":{"rendered":"Fake CAPTCHA Is Installing Malware on Your Phone \u2014 How to Spot It Before You Tap"},"content":{"rendered":"

CAPTCHAs are supposed to feel routine. You click a box, type a few letters, or select every image with a traffic light to prove you are not a bot.<\/span><\/p>\n

That routine is exactly what scammers are exploiting.<\/span><\/p>\n

The FTC has warned about fake CAPTCHA pages that look like normal security checks but are designed to trick people into installing malware on their own devices. Instead of asking for a simple verification, the page may tell you to press keyboard shortcuts, paste commands, approve a download, or follow unusual steps before continuing.<\/span><\/p>\n

That is the red flag: a real CAPTCHA checks whether you are human. It does not need you to control your device manually.<\/span><\/p>\n

How the fake CAPTCHA scam works<\/b><\/h2>\n

The scam usually starts while you are browsing a website, opening a link, or landing on a page that suddenly shows a \u201csecurity verification\u201d prompt.<\/span><\/p>\n

At first glance, it may look harmless. The screen might use familiar language like \u201cI\u2019m not a robot,\u201d \u201cverify you are human,\u201d or \u201ccomplete this security check.\u201d That familiar design lowers your guard.<\/span><\/p>\n

But the next step is what makes the scam dangerous. According to the FTC, some fake CAPTCHA pages instruct users to press commands such as \u201cWindows + R,\u201d then \u201cCtrl + V,\u201d and then \u201cEnter.\u201d Those steps can paste and run a hidden command that installs malware.<\/span><\/p>\n

Security researchers have also reported fake CAPTCHA pages that hijack the clipboard and push users into running malicious commands, often leading to information-stealing malware.<\/span><\/p>\n

Once installed, that malware may try to steal login details, browser data, passwords, online shopping credentials, email access, banking information, or other sensitive data stored on the device.<\/span><\/p>\n

Why this scam feels believable<\/b><\/h2>\n

Fake CAPTCHA scams work because CAPTCHAs are already part of everyday internet life. People see them when logging into accounts, buying something online, creating profiles, or visiting sites with extra security checks.<\/span><\/p>\n

That familiarity creates trust.<\/span><\/p>\n

Scammers copy the look of a normal verification screen and turn a common habit into a trap. The page may feel routine, but the instructions are not.<\/span><\/p>\n

If a verification screen asks you to open a command window, paste something, install an app, approve a download, or change settings on your device, stop immediately.<\/span><\/p>\n

A real CAPTCHA may ask you to select images, check a box, type characters, or solve a simple challenge. It does not ask you to run shortcuts, paste commands, or install software to prove you are human.<\/span><\/p>\n

The biggest warning signs of a fake CAPTCHA<\/b><\/h2>\n

The clearest warning sign is any CAPTCHA that asks you to do more than complete a simple verification task.<\/span><\/p>\n

Be especially cautious if the page asks you to:<\/span><\/p>\n