When you solve captchas, your data could be collected and sold

You know about captcha tests, right? The anti-bot checks that can be found all over the internet, usually when you log into accounts or post comments? The picture puzzles and mysterious symbol sequences that are supposed to weed out the bots from humans?

Turns out, those captcha tests have been pretty useful for a while now. Modern bots have long been able to outsmart many captcha tests, and it’s getting worse thanks to the proliferation of AI.

So, why are there still so many captchas on the web? Apparently, they serve a different purpose now. Instead of identifying and blocking bots, they’re being used to collect user data, according to a YouTube channel named Chuppl (spotted by Techspot).

The deceptive nature of captchas

According to experts, newer captchas collect a lot of data about the users who solve them. In addition to your browser, captchas also know your IP address and even the VPN service you’re using. Anyone surfing with a VPN runs the risk of being blocked sooner than even some bots.

This is a problem because you probably didn’t even know that interacting with a captcha transmits data. You’re simply led to believe that you’re just being tested to prove you aren’t a bot. How deceptive.

Google’s reCAPTCHA under fire

According to a video posted by YouTube channel Chuppl, Google’s reCAPTCHA is especially problematic. Allegedly, reCAPTCHA v2 and v3 aren’t designed to fend off bots at all — instead, their main objective is to collect data from anyone who tries to solve them.

Not only does reCAPTCHA collect your browser and IP address, it also stores info relating to your browser history, cookies, and more. All of that data is collected and sold to other companies.

By checking off an innocuous captcha box, you’re passing on sensitive data without the ability to reject its collection. Experts estimate the value of the data collected in this way at around $898 billion, which points to just how lucrative the captcha data business can be.

Data protectionists are calling for captchas to be abolished. Not only do they no longer fulfill their stated purpose, they also harm the user experience on websites and provide a gateway for hackers.

Further reading: How does a captcha know I’m not a robot?