CAPTCHA Scam: Cyber criminals have now found a new way to cheat people. They trap innocent users by showing fake CAPTCHA codes. This code looks similar to real verification but through this dangerous malware like Luma Stealer enters the phone and computer. This malware can steal sensitive data. Internet users in India need to be very cautious, especially when browsing unknown websites, clicking on pop-up ads or turning on browser notifications.

Fraud in the name of CAPTCHA

We are all familiar with CAPTCHA codes like ticking “I am not a robot”. This system was actually created to stop bots. But now thugs are misusing this trusted technology. According to media reports, cyber criminals are inserting fake CAPTCHA codes in hacked websites, phishing emails and misleading advertisements. As soon as a user clicks on it, the malware secretly gets installed in his device and steals passwords, login details and even banking data.

The threat of Luma Stealer

According to cyber security experts, a malware called Luma Stealer is being spread the most in this scam. This malware can steal passwords, browser history and other data saved in the device. The most dangerous situation arises when the user clicks on the fake CAPTCHA and turns on notifications, which gives hackers deeper access.

How does this scam work?

The thugs first create a fake website that looks like the real platform.

They make the user click by showing a fake CAPTCHA on the screen.

After this, they are asked to download the file or turn on notifications.

Clicking directly does not cause immediate harm, but as soon as the instructions are followed, malware gets installed in the device.

How to avoid this CAPTCHA scam?

Always check the URL, fake sites often have spelling mistakes or strange characters.

Do not turn on notifications from unknown websites.

Ignore pop-ups that ask to install apps/files or ask for permissions.

Keep antivirus and security software updated.

Be careful on public Wi-Fi, it is an easy target for hacking.

Be sure to check the authenticity of the site and do not follow random instructions appearing on the screen.