The CAPTCHA box to prove you’re not a robot could be a scam. Here’s what to watch out for

You’ve probably seen it countless times: a small box at the bottom of a webpage asking you to verify that you’re not a robot.

It’s called a CAPTCHA, and most of the time, you click it and move on without a second thought. But in some cases, that simple click could be the start of a scam.

How the scam works

The scam often begins just like any normal CAPTCHA.

You click the box—but instead of proceeding, an error message appears. It may ask you to press a specific sequence of keys to fix the issue.

That’s the red flag.

If you see this, stop immediately and do not follow those instructions. Those steps actually open up a hidden command box on your computer.

The Identity Theft Resources Center told NBC10 Responds that command box can allow a scammer to install malware on your device.

“That’s going to track what you do and give them access to all the logs in your computer. So that give them access to things like your Outlook email and some of your other kinds of accounts that you make,” James Lee, president of the ITRC.

Lee said if this happens to you, there are steps you can take to prevent further damage. But you need to act fast.

1. Disconnect from WiFi immediately.
2. Change your passwords on all of your accounts
3. Run a virus scan on your computer that can help detect any malware.
4. Consider putting a freeze on your credit, doing that prevents anyone from opening accounts in your name.

If something feels off—especially if you’re asked to follow unusual instructions—trust your instincts and don’t proceed.