Fake CAPTCHA Scam Triggers Costly SMS Charges, Experts Warn

Fake CAPTCHA Scam Triggers Costly SMS Charges, Experts Warn

You are currently viewing Fake CAPTCHA Scam Triggers Costly SMS Charges, Experts Warn
Fake CAPTCHA pages can trick users into sending text messages that result in unexpected charges on their phone bills.

Scammers use fake CAPTCHA checks to trick people into sending text messages and charging their phone bills. Here’s how it works and what to do if you sent a text.

What Happened?

According to TechRadar, Infoblox, a cybersecurity company, is warning about a global scam that uses fake CAPTCHA tests to trick people into sending text messages.

Fake CAPTCHAs look like the ones you see online every day. They ask you to “prove you’re human,” so most people don’t think anything is wrong.

But instead of clicking images or checking a box, the page tells you to send a text message to continue.

Many users follow the steps without realizing it’s a scam. The problem shows up later, when unexpected charges appear on their phone bill.

How Fake CAPTCHA Scam Works: 5 Steps 

Here’s how it usually happens:

  1. You land on a website with a CAPTCHA test

After you click a link, ad, or pop-up, a page with a CAPTCHA opens — it looks convincing and real, so you trust it.

  1. The page asks you to send a text message from your phone

Instead of clicking a box, it tells you to send a regular SMS to a number to prove you are human.

  1. The message is already written for you

You open the texting app with the number and message filled in, so you only need to tap Send.

  1. The text goes to a premium or international number

You send the message, and a charge is added to your phone bill right away.

  1. You are asked to repeat the step

The page says it didn’t work and tells you to send another message, adding more charges.

Fake CAPTCHAs may also try to keep you on the site by blocking the back button or showing more steps, pushing you to continue. Most people either keep following the instructions or close the page.

When a website does not let you leave normally or sends you back when you click Back, it’s called back button hijacking. Learn more about how it works and what to do if you get stuck on a page like this.

What Scammers Actually Get From This 

This scam is mainly about taking your money — but that’s not the only risk.

 When you interact with a fake CAPTCHA page, you may give away more than you think:

  1. Your phone number gets confirmed

Once you send a message, scammers know your number is real and active. This can make you a target for more scam calls or texts.

  1. Basic device details can be collected

Just opening the page can reveal simple information, like the type of phone you use or your location. Scammers use this information to make their next attacks more convincing. 

  1. Your number may be shared with other scammers

Active phone numbers are valuable. They can be passed around or sold, which can lead to more unwanted messages later.

  1. Charges can appear later

The text messages you send may not show up right away. You might only notice the charges days later on your phone bill.

You may never know how much of your information was leaked, or where it ended up.

If you’re not sure whether your data was leaked, it’s recommended to check. 

With Futureproof, you can quickly see if your data was leaked and get simple steps to secure your accounts.

Woman securing her accounts on her phone after using a fake CAPTCHA website
If you sent a text message after a fake CAPTCHA check, act quickly to review charges, contact your carrier, and protect your accounts.

5 Steps to Take If You Sent a Text Message in a CAPTCHA Scam

1. Check your phone bill or balance

Look for unusual charges, especially international or premium messages.

Experts warn that fake CAPTCHA pages can trick users into sending dozens of international SMS messages, with charges sometimes appearing weeks later on their phone bills.

2. Contact your mobile carrier

Tell your mobile carrier that a scammer may have charged you, and ask them to block premium or international text charges on your account.

3. Save proof if you can

Take a screenshot of the fake CAPTCHA page or message to show what happened if you need to dispute the charges. Save any texts you receive after sending the message, since they can also help.

4. Report the scam

You can report this scam to the Federal Trade Commission at ReportFraud.ftc.gov. Reporting helps track these scams and may prevent others from being affected. 

5. Secure your accounts

If you entered any information, change your passwords and watch for unusual activity.

If you’re not sure how to secure your accounts, Futureproof Email Protection can help. It shows you how to create strong passwords and turn on two-step verification with a simple video explainer.

A CAPTCHA That Asks You to Send an SMS Is Not Real

These fake checks are designed to look familiar, so you act quickly without thinking. But one simple step — sending a text — turns a human check into a charge on your phone bill.

If CAPTCHA feels too unusual for a basic human check, stop and leave the page.

Always take a moment to double-check before you act. It can save you money and help you avoid getting pulled deeper into a scam.