Menu

Wananga Landing
Profile image
Student Notices

Stay alert: don't get tricked by fake "verify you're human" checks

05 October 2026

The Digital Security & Risk Team is seeing an increase in a scam technique known as ClickFix. The goal is to trick people into running harmful commands on their own device. 

HOW TO APPLY

Attackers create convincing webpages that look like legitimate verification screens, security checks, or login prompts. 

They may ask you to:

  • Press Windows + R

  • Open PowerShell or Command Prompt 

  • Copy and paste a command

  • Follow instructions to "verify you're human" or regain access to a website.

If you follow these instructions, you could unintentionally give attackers access to your device, accounts, or personal information. 

What a scam might look like 

🚨 A webpage says:

"To continue, complete the verification steps below:

  1. Press Windows + R

  1. Press Ctrl + V 

  1. Press Enter".

This is not how legitimate verification systems work. Real websites will never ask you to run commands on your computer to prove you are human.

Remember

✅ Safe:

  • Complete normal CAPTCHA challenges
  • Use University login pages
  • Contact the Service Desk if something seems suspicious.

❌ Not Safe:

  • Opening PowerShell, CMD, or Run because a website tells you to
  • Copying and pasting commands into your computer
  • Following technical instructions you don't understand.

If you're unsure

Stop immediately and close the page.

If a website asks you to run commands on your computer, report it to the Service Desk or contact Cyber Security at cybersecurity@canterbury.ac.nz before proceeding.

Think before you click. A legitimate website will never ask you to run commands on your device to access content, verify your identity, or prove you're human.


See more notices
Privacy Preferences

By clicking "Accept All Cookies", you agree to the storing of cookies on your device to enhance site navigation, analyse site usage, and assist in our marketing efforts.