Fake CAPTCHA attacks exploded by 563% last year: How to spot them and stay safe online

You might not think of a CAPTCHA check as a cybercrime lure, but if you fall prey to one, you may become infected with malware. Learn how to spot them with our guide.

Follow ZDNET: Add us as a preferred source on Google.

ZDNET's key takeaways

• Malicious CAPTCHAs are becoming increasingly popular as a lure.  
• They increased 563% in use over 2025.
• Spotting a fake CAPTCHA can be challenging, but here's how. 

CAPTCHAs can be annoying, but they provide a level of user verification that can help web services defend against a range of cyber threats. 

Unfortunately, they can also be employed as malicious lures that target visitors, and appear to be becoming a weapon of choice for modern cybercriminals. 

Also: Ordering a new phone? Watch out for this convincing scam that hits immediately after

According to CrowdStrike's 2026 Global Threat Report ...