THE SCAM
The CAPTCHA that hacks you.
It starts with something you've seen a thousand times: a little checkbox that says "prove you're human." But after you click it, the page gives you strange instructions — press Windows + R, then Ctrl + V, then Enter — to "finish verifying."
The moment you do, you've pasted hidden malware straight onto your own computer. No download bar. No warning. You did the hacker's job for them.
THE RED FLAG
A real CAPTCHA never asks you to touch your keyboard. It never asks you to open the Run box, paste anything, or press key combinations.
Any "verification" that gives you keyboard instructions is not verifying you. It's using you.
THE RULE
If a CAPTCHA tells you to press keys, close the tab immediately. Run a quick antivirus scan just in case. And warn whoever sent you the link — they probably got the same pop-up.
(Source: Widely reported ClickFix-style campaigns, 2025–2026)
SIGN-OFF
That's today's red flag. One scam, one red flag, one rule — pass it to someone who clicks first and asks questions later.
Got a scam text or a sketchy email? Send it via the contact page — the best ones make future red flags.