PROTECTING YOUR FINANCES
Sometimes, you have to jump through hoops to get to a website.
Click on all the images that include motorcycles.
Check this box to verify you’re human.
These CAPTCHA tests exist to protect websites from bot attacks and spam
Now, counterfeit CAPTCHA tests are being used in one of the fastest-growing scams around, according to the Federal Trade Commission.
Learn the tricks behind this scam so you’ll know how to avoid it.
How the CAPTCHA scam works
You’re browsing online and run into a phony CAPTCHA request asking you to verify that you’re human. While you’re busy clicking the box, the webpage works behind the scenes to copy malicious code to your clipboard.
Next, you see a message saying the CAPTCHA verification failed with instructions to click a button or follow these steps:
- Press the Windows key + R
- Then Ctrl + V
- Then Enter
If you follow those steps, the malicious code will run on your computer, giving the scammer access to your email, login credentials, and cryptocurrency wallet (if you have one).
How to spot a CAPTCHA scam
This scam often appears as a link in an email that takes you to a fake CAPTCHA site. Other times, it’s on legitimate websites that have been compromised, third-party ads, pop-ups, and phony search results.
Watch for these red flags:
- The URL looks suspicious when you hover over it in your email.
- The CAPTCHA request seems out of place, like appearing as a pop-up instead of as part of the webpage.
- After a failed verification, you’re asked to click a button or type in a code. A legitimate CAPTCHA request would simply ask you to try again.
What to do if you’re a victim of the CAPTCHA scam
- Disconnect from the internet. Turn off your Wi-Fi or other connection to stop the scammer from stealing information.
- Look for suspicious files on your computer. If you see something you didn’t download, don’t open it. Delete it then empty the trash/recycle bin.
- Clean up your computer. Scan it with up-to-date antivirus and antimalware software. Clear your browser cache and cookies. Remove any unfamiliar extensions, too.
- Secure your accounts. Change your passwords on another device, then add two-factor authentication for extra protection. Over the next few weeks, monitor your bank account and credit card statements for unusual activity. Consider placing a credit freeze with the three national credit bureaus.
- Call us at 888-248-6423. We can place a fraud alert on your account to prevent unauthorized transactions and help monitor your account for suspicious activity.
- Report the scam. File a report at ReportFraud.ftc.gov. If money or property was stolen, report it to your local police as well.
