# Fake CAPTCHA

A fake CAPTCHA is a verification screen imitating Cloudflare or reCAPTCHA that hides a phishing page from scanners or tells the visitor to run a malicious command.

## How it works

Some kits put an interstitial "verify you are human" page in front of the phishing content so automated scanners stop there and see nothing harmful.

In ClickFix campaigns the fake CAPTCHA itself is the lure: it asks the user to paste a copied command to "complete verification".

## Example from the PhishDestroy database

- [correors.qpon](https://phishdestroy.io/domain/correors.qpon/): Phishing domain whose page showed a CAPTCHA-style title, first detected 2026-10-22.
- [captcha.slons10.at](https://phishdestroy.io/domain/captcha.slons10.at/): Phishing domain whose page showed a CAPTCHA-style title, first detected 2026-10-21.
- [auspost.addllw.com](https://phishdestroy.io/domain/auspost.addllw.com/): Phishing domain whose page showed a CAPTCHA-style title, first detected 2026-10-19.

## How to protect yourself

- A real CAPTCHA never asks you to open Run, a terminal or a file.
- Be suspicious of verification screens on sites reached from ads or messages.

## Related tools

- [Scam Triage Wizard](https://phishdestroy.io/developer-tools/scam-triage-wizard)

## Related terms

- [ClickFix](https://phishdestroy.io/glossary/clickfix/)
- [Cloaking](https://phishdestroy.io/glossary/cloaking/)

## Further reading

- [Cloaking & White Pages Explained](https://phishdestroy.io/cloaking-whitepages-explained)

## Glossary

- [All terms](https://phishdestroy.io/glossary/)

Canonical: https://phishdestroy.io/glossary/fake-captcha/