Beware of New CAPTCHA Scam Allowing Hackers Access

Experts warn of a social engineering trick using fake CAPTCHA screens to steal computer access.

Apr. 16, 2026 at 9:36am

Got story updates? Submit your updates here. ›

A highly detailed 3D illustration of a glowing, neon-lit computer desktop with various digital elements like windows, icons, and cables pulsing with cyan and magenta light. The desktop is partially obscured by a large, translucent CAPTCHA grid overlay, representing the deceptive nature of the scam.A luminous, high-tech illustration of a CAPTCHA scam that allows hackers to infiltrate personal computers through social engineering tactics.Today in Tampa

A new scam is using fake CAPTCHA authentication screens to trick people into typing a series of key combinations that allow hackers to access their computers. Cybersecurity experts say this social engineering technique preys on people's tendency to act automatically without thinking, putting their personal information at risk of theft.

Why it matters

When hackers gain access to a person's computer, they can steal sensitive information like usernames, passwords, and screenshots of activity, essentially giving them an "all-access pass" to the victim's digital life. This scam highlights the importance of being vigilant and skeptical when encountering unusual online requests.

The details

Instead of a standard CAPTCHA window, scammers are presenting fake CAPTCHA screens and asking victims to type a series of key combinations like Windows Key + R and Control Key + V. Typing these keys runs a hidden program that gives the hackers access to the computer. This technique is known as social engineering, where bad actors exploit people's tendency to act automatically without thinking.

  • This new CAPTCHA scam has been spreading in recent months.

The players

Federico Giovannetti

An assistant professor of cybersecurity at the University of Tampa who warns about the dangers of this scam.

Eva Velasquez

The CEO of the Identity Theft Resource Center, a nonprofit that helps people prevent and respond to scams and hacking.

Got photos? Submit your photos here. ›

What they’re saying

“So, you end up running what they wanted you to run, but unbeknownst to you,”

— Federico Giovannetti, Assistant Professor of Cybersecurity

“A lot of people just work on automatic, right. They don't stop to think, why am I doing this? And that is one of the techniques used in deception and in social engineering, because we just don't stop to think.”

— Federico Giovannetti, Assistant Professor of Cybersecurity

“They can see when you're typing in your username and password for a variety of different sites, they may be able to even take screenshots of your computer so they can see what you're doing. Really, it's an all-access pass to anything that you're working on.”

— Eva Velasquez, CEO, Identity Theft Resource Center

What’s next

The Identity Theft Resource Center can provide free recovery services for victims of this scam, and experts suggest installing antivirus software to help stop hackers.

The takeaway

This CAPTCHA scam highlights the importance of being vigilant and skeptical when encountering unusual online requests, as hackers are using social engineering tactics to trick people into compromising their computer security and exposing sensitive information.