Home / Technology / CAPTCHA Scam Rips Off Users With Costly Texts
CAPTCHA Scam Rips Off Users With Costly Texts
27 Apr
Summary
- Fake CAPTCHAs trick users into sending numerous international SMS messages.
- Scam has been active since at least June 2020, targeting victims globally.
- Simple defense: never text to prove you are human.
Security researchers have uncovered a sophisticated CAPTCHA scam that has been active since at least June 2020. This elaborate scheme deceives individuals into sending costly international SMS messages, with attackers profiting from telecom revenue sharing. The scam leverages social engineering and browser hijacking techniques to redirect victims to malicious websites.
These fake CAPTCHA pages require users to "confirm they are human" by sending an SMS. The process is designed to trigger multiple messages to various international numbers, potentially costing victims up to $30 for as many as 60 texts. The delayed billing of international SMS charges often means victims forget the scam by the time the bill arrives.
Infoblox researchers identified 35 phone numbers across 17 countries involved in this operation. Both end-users and telecommunication companies are impacted. Users face unexpected charges, while telecoms handle chargebacks and refunds. The simple yet crucial defense against this scam is to never send a text message to verify humanity.
