A website asks you to prove you’re human by pressing a few keys and pasting something. Don’t. Real robot checks only ever want a click or a drag.
Perfect for sending to someone who won't read a whole article.
You click a link and a familiar little box pops up: “Verify you are human.” Normal enough. But then it gets weird. “Press the Windows key and R. Now press Ctrl and V. Now press Enter.”
It feels like a slightly fussy security check. It’s actually you, with your own two hands, installing a burglar’s tool on your computer. Security folks call this trick “ClickFix,” and it’s one of the fastest growing scams out there right now.
A real “are you human” check only asks you to click a box, pick the pictures with fire hydrants, or slide a puzzle piece. Anything more than a click or a drag, and you should shut it down.
While you were reading the instructions, the fake page quietly copied a command onto your clipboard. That’s the “copy” half of copy and paste, done for you without asking.
Then the steps walk you through the rest. On Windows, the first key combo opens a little box that runs commands. Ctrl and V pastes their command into it. Enter runs it. (On a Mac, they’ll ask you to open Terminal and paste instead.) That command downloads malware that can grab your saved passwords, browser logins, and crypto wallets, then let the attacker log in as you somewhere else.
It’s clear to the attackers what the keystrokes do. It’s not clear to you, and that’s the whole point.
The whole idea of a robot check is to ask something easy for a person and hard for a computer program. Clicking a box, spotting stoplights, dragging a puzzle piece. That’s it. A website has no reason to make you open hidden tools on your own computer, and no legitimate site ever will.
Notice how polite and official the box looks? Scammers love borrowing the look of things we trust. The look is free. The behavior is the tell: real checks want a click, not your keyboard.
One short email: the scam making the rounds, one tech word made simple, and one tip to keep you and your family safe. Free, no spam, unsubscribe anytime. Plus a free printable "How to Spot a Scam" sheet for your fridge.
We send one email to confirm it's really you. Your address stays with us and our email service, nobody else. Privacy
You bought a sealed gift card, loaded it, and it was already drained. Here is how scammers empty cards in the store before you ever pick them up, and what to check before you pay.
A call says your power will be shut off tonight unless you pay right now. Real utility companies send written notices first. Here is how to spot the fake before you panic.
A package you never ordered shows up with an Amazon smile and a QR code inside. Scan it and you land on a fake Amazon sign in page. Here's how the trick works and what to do instead.
