The Kent Police Department is warning residents about a growing online scam that uses fake CAPTCHA verification screens to trick users into downloading malware that can steal passwords, account information and money.
According to Kent police, the scam takes advantage of the familiarity many internet users have with CAPTCHA security checks, which are commonly used by websites to verify that a visitor is a real person and not an automated program.
Police said legitimate CAPTCHA requests typically ask users to check a box, identify images such as traffic lights or crosswalks, or enter characters displayed on a screen.
The fraudulent version, however, asks users to complete additional verification steps and follow a series of keyboard commands.
According to the department, following those instructions can result in malware being downloaded onto a computer or mobile device. Once installed, the malicious software can allow scammers to obtain saved passwords, account information and other sensitive data.
Kent police shared guidance from cybersecurity resources warning that users should be suspicious of any CAPTCHA that requests downloads or asks them to paste commands into their device.
“Real CAPTCHAs only ask you to tick a box or solve a quick puzzle. You shouldn’t be asked to download files or paste commands,” the department said in its warning.
Police encouraged residents to learn more about the scam, review available resources and immediately seek guidance if they believe they may have fallen victim.
The department also urged community members to share the warning with friends and family members who may be unaware of the threat.
