Fake CAPTCHA 'ClickFix' scam tricks people into installing malware
Scammers are putting fake “I’m not a robot” checks on websites and then tricking people into following extra steps that secretly give criminals access to their computer, passwords, and financial information. A real human-check should never ask you to open system tools, paste text, or run instructions to “fix” the check.
Who is at risk
Anyone who browses the internet on a Windows or Mac computer and may trust a website prompt to complete extra verification steps is at risk.
What to watch for
Watch for any human-check or website pop-up that tells you to click a “Fix” button, open a computer tool, paste text, or type commands to continue.
What to do
If you did this, disconnect your device from the internet right away, use a different trusted device to change important passwords, and check your bank and card accounts for unusual activity.