Fake security verification pages

CAPTCHA Scam

A fake CAPTCHA can look like a normal 'prove you are human' check but instruct you to run keyboard commands or paste something into your computer. That is not how legitimate CAPTCHAs work.

Check it now More scam guides

Run-command instructions

The page may tell you to press Windows + R, Ctrl + V, and Enter.

Fake security language

It may claim the commands are needed for verification, browser security, or anti-bot checks.

Malware risk

Following the steps can run hidden code that steals passwords, banking data, or other information.

How fake CAPTCHA scams work

The scam relies on a familiar interface. People are used to completing CAPTCHA challenges, so a fake page can feel routine even when the instructions are unusual.

A legitimate CAPTCHA should not require you to open a system command window, paste hidden commands, or run software on your device.

Common warning signs

A CAPTCHA asks you to use Windows Run, PowerShell, Terminal, Command Prompt, or similar tools.
The page tells you to paste a command from your clipboard.
A file downloads after completing the supposed verification.
You arrived at the CAPTCHA through a suspicious ad, pop-up, redirect, or unknown website.

Safer way to respond

Do not run any command requested by a CAPTCHA page.

Close the page. If you already ran a command, disconnect the device from the internet and run a trusted security scan.

Change important passwords from a different trusted device and enable multi-factor authentication if you think credentials may have been exposed.

What SafeOrScamCheck can and cannot tell you

SafeOrScamCheck can inspect the website URL and pasted message text for warning signals, but it is not a malware sandbox and does not execute or analyze downloaded programs.

Official guidance

The FTC warned in June 2026 about fake CAPTCHA pages that instruct people to run commands which can install malware and steal account information. Read the official guidance.

Frequently asked questions

Will a real CAPTCHA ask me to open Windows Run or Terminal?

No. A legitimate CAPTCHA should not require you to run operating-system commands.

What should I do if I already ran the command?

Disconnect from the internet, run a trusted security scan, and change important passwords from another trusted device.

Can SafeOrScamCheck scan malware?

No. It analyzes warning signals in URLs and text; it does not execute suspicious files as a malware sandbox.

Related checks and guides

SafeOrScamCheck provides warning-signal analysis, not proof that a message, link, website, QR code, or offer is safe or fraudulent. Verify important identities, payment details and claims independently before acting.