# ClickFix

ClickFix is a social-engineering technique in which a web page tells the visitor to fix a fake error by pasting a command (copied to the clipboard by the page) into the Run dialog or a terminal, which installs malware.

## How it works

The page shows a fake browser error, document viewer or CAPTCHA. A button silently copies a PowerShell or shell command to the clipboard, and the instructions tell the user to press Win+R, paste and press Enter.

Because the victim runs the command themselves, many browser and email protections never see a download.

## How to protect yourself

- No website needs you to paste anything into Run, PowerShell or Terminal. Close the page.
- If you already ran it, disconnect the device and treat stored passwords and wallets as compromised.

## Related tools

- [Multi-Layer Decoder](https://phishdestroy.io/developer-tools/multi-layer-decoder)
- [Scam Triage Wizard](https://phishdestroy.io/developer-tools/scam-triage-wizard)

## Related terms

- [Fake CAPTCHA](https://phishdestroy.io/glossary/fake-captcha/)
- [Traffic distribution system (TDS)](https://phishdestroy.io/glossary/tds/)

## Further reading

- [Cloaking & White Pages Explained](https://phishdestroy.io/cloaking-whitepages-explained)

## Glossary

- [All terms](https://phishdestroy.io/glossary/)

Canonical: https://phishdestroy.io/glossary/clickfix/