‘I’m Not a Robot’ Becomes a Cyber Trap: Fake CAPTCHA Pages Target Users’ Personal Data

Now, these CAPTCHA that were once used for security in the digital world have now become a threat to users. Cyber attackers are luring people to fake webpages and making them victims of phishing scams using options like "I'm Not a Robot".

While such attacks used to be difficult, they have now become extremely easy. With the help of free hosting platforms like Vercel, Netlify, or other tools, anyone can create a website that looks like a real one in minutes.

With the increasing use of artificial intelligence (AI), identifying phishing sites has become even more difficult. The design, text, and security alert messages of phishing sites appear so realistic that it's difficult for users to distinguish between the real and the fake.

As soon as a user clicks on a message requesting a password reset, delivery update, or bank verification, they are prompted to fill out a fake form. At that point, their email address, bank details, or other sensitive information are captured by cyber criminals.

The best way to avoid these growing cyber scams is to be vigilant and scrutinize. Always check the URL before clicking on any link. The website should always start with https, and its domain should match the genuine organization.

Also, keep two-factor authentication (2FA) enabled on all your accounts. This will keep your account secure even if your password is leaked. Additionally, regularly update your browser and security software. Immediately report any suspicious email or website to CERT-In or the relevant company.