Google's Hand-Wave reCAPTCHA Bypassed by Stock Photo

*Google's gesture-based CAPTCHA, built to defeat AI solvers, falls to a plain stock image.*

Google introduced the hand-wave reCAPTCHA after standard puzzles proved solvable by current AI bots. The replacement requires users to wave a hand in front of a camera. That version can be defeated with a stock photo.

The change was made because automated systems had grown capable of clearing the older text or image challenges. Google therefore shifted to a physical gesture check that it expected would remain out of reach for bots. Reports now show the gesture step itself is unnecessary once a suitable still image is presented.

No technical details on the bypass method beyond the use of an ordinary stock photograph have been released. The finding indicates the new check adds friction for people without stopping automated traffic.

Why it matters

The episode shows how quickly any single-signal test can be gamed once its mechanics become known. Companies that rely on CAPTCHA to separate humans from scripts will need layered or continuously updated signals rather than one static replacement. For site operators, the practical result is continued exposure to scripted traffic despite the added user step.

---

Sources:

• Neowin

{
  "excerpt": "Google's hand-wave reCAPTCHA, introduced to block AI bots, can be bypassed with a stock photo.",
  "suggestedSection": "security",
  "suggestedTags": ["recaptcha", "google", "captcha"],
  "imagePrompt": "An abstract scene of a raised hand silhouette against a grid of faint photographic prints, suggesting a simple bypass of motion checks. Soft shadows and layered textures fill the frame without any devices or text. muted color palette, cinematic lighting, 16:9"
}