How to spot a fake Captcha - and what to do if you fall for one - Which?

Which? explains how fake CAPTCHA scams work and how to respond if you’re tricked. Legit CAPTCHAs typically ask users to tick a box, select images, or complete an in-browser challenge, but cybercriminals are increasingly imitating them with prompts that move users outside the browser. The article warns that victims may be instructed to press Windows key + R or open Windows Run, PowerShell, or Command Prompt, then paste commands—sometimes already copied to the clipboard—leading to malware downloads. Once installed, malware can enable password and personal-information theft. It advises closing the tab if instructions appear to run outside the browser.