A “ClickFix” captcha scam tricks people into pressing keys, then uses the steps to install malicious software on their computer. Instead of clicking images or typing letters, victims are asked to press a sequence of keys and then press enter when a website claims they must verify they are human. The scheme has become a popular malware method, a researcher at Malwarebytes said. The scam can appear on familiar captcha-style pages. It may prompt users to tick a box and then instruct them to perform actions on their keyboard. One version tells people: “Press & hold the Windows Key + R. In the verification windows, press Ctrl + V. Press Enter on your keyboard to finish.” By checking the box, users have given the system permission to copy malicious code to the clipboard on their computer, then the pasted content is used to infect the device. Other versions of the fraud display an error message such as “something went wrong when displaying a webpage” and provide similar “fix it” instructions. The researcher said the approach works because people are used to solving captchas quickly and are more likely to trust their security software. They warned users to pause and think before carrying out any verification steps, and to check what malware-blocking protections are in place. If someone has been compromised, the advice given is to contact their bank immediately and change passwords, starting with the most important ones.