A CAPTCHA asking you to run a command is a warning, not a test
Recognize ClickFix-style instructions, close the page and respond differently if you already executed the copied command.
In brief
A webpage telling you to open Run, PowerShell or a terminal and paste a command is asking you to execute code on your device. Calling it a CAPTCHA or repair step does not make that action part of normal human verification.
Recognizing the change from browser interaction to operating-system execution lets you stop before the page gains a far more dangerous route.
Notice the action being requested
The important cue is not the spelling of “CAPTCHA.” It is the request to leave the webpage, use an operating-system shortcut and paste instructions. A malicious page may place text on the clipboard while showing a different explanation. Do not test the instruction to prove it is suspicious.
If you have not run it
Close the tab without granting notifications or downloading a repair tool. Clear the clipboard by copying harmless text if needed, then use the official service independently. Report the page through the browser or service’s supported reporting route without spreading the active command.
If you have run it
Treat it as a possible device incident, not only a browser issue. Isolate the device where appropriate and preserve the page and timing privately for the responder. Use a clean device for account protection; changing passwords on a potentially compromised machine can expose the replacements too.
Before you act
The copied text may differ from what the page shows. Do not paste it into a terminal to inspect it, and do not assume a real-looking website cannot be compromised.
What to do next
- Stop at any verification instruction asking for a shell or command prompt.
- Close the page and open the intended service through a known official route.
- If you ran the command, stop using the device for sensitive work and contact appropriate security support.
