Is it safe to click on ""I'm not a robot""?

Is It Safe to Click “I’m Not a Robot”?

You’ve seen it a thousand times: a checkbox asking you to confirm you’re not a robot. It feels routine—almost second nature. But what if that simple click isn’t as harmless as it seems?

In most cases, legitimate reCAPTCHA prompts from Google are safe and widely used across the web. The real danger lies in fake versions designed to trick you. Cybercriminals often mimic the look of real security checks, embedding malicious scripts on shady websites or phishing pages.

Here’s how the scam works: you click “I’m not a robot,” just like always. But instead of verifying your identity, a hidden script silently copies to your clipboard. Moments later, a pop-up instructs you to paste and run the code—framed as a “required step” to prove you’re human. That’s the trap.

Once executed, that script could install malware, steal your passwords, or give attackers remote access to your device. It’s not the checkbox itself that’s dangerous—it’s where you’re clicking and what follows that matters.

To stay safe, always check the URL. Stick to trusted sites, and never paste code into your terminal or browser console unless you fully understand it and trust the source. Real CAPTCHA systems never ask you to run commands.

If a verification process feels off—if it asks you to copy-paste code or perform strange steps—trust your gut. Close the tab. Don’t play along.