Kerala Police Warns Public Against ‘ClickFix’ Cyber Scam That Steals Banking and Email Data

Kerala Police has warned people about a fast growing cyber scam called ClickFix, which tricks users into giving hackers access to their computers through fake CAPTCHA verification pages. The advisory comes as security experts worldwide report a sharp rise in such attacks.

According to the police, scammers create fake websites that display what looks like a normal CAPTCHA test to prove a user is not a robot. After the user clicks it, a fake message appears asking them to open PowerShell, Command Prompt, or another system tool, paste a command, or download a file.

If the instructions are followed, malware is installed on the device. The attackers can then steal online banking details, email accounts, passwords saved in web browsers, and even social media login details. In some cases, victims may be locked out of their own accounts, with hackers demanding money to restore access.

Kerala Police stressed that no genuine website will ever ask users to run PowerShell or Command Prompt commands, copy and paste code, or install software as part of CAPTCHA verification. Users should immediately close such websites without following any instructions.

Anyone who believes their device has been infected should disconnect it from the internet by turning off Wi-Fi or unplugging the LAN cable. They should avoid sharing files from the affected system and take it to the nearest cyber police station for help.

Victims of cyber fraud should immediately call the National Cybercrime Helpline 1930 or report the incident through the Cyber Crime Reporting Portal.