Google’s new CAPTCHA asks users to wave hand at camera, users fear privacy trade-off
Google has introduced a new hand-gesture verification system for reCAPTCHA that asks some users to grant camera access and perform simple hand movements to prove they are human.
Google has introduced a new hand-gesture verification system for reCAPTCHA that asks some users to grant camera access and perform simple hand movements to prove they are human.
- Google is testing a new reCAPTCHA check that asks some users to allow camera access and make simple hand gestures, aiming to better spot human users and block advanced AI bots.
- The tech giant says the system only analyzes hand-movement points from a short video, does not record audio, and deletes the footage after verification.
- The feature is already raising privacy and effectiveness concerns, with some users uncomfortable about camera-based verification and some claiming it may still be bypassed
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
The new feature is part of Google’s effort to combat increasingly sophisticated AI-powered bots, which are becoming more capable of bypassing traditional CAPTCHA tests that require users to identify a number of objects in images – from ladders and road crossings to fire trucks and bicycles – or to solve barely legible puzzles.
According to Google, the new system analyzes a short video of a user’s hand and extracts 21 hand-landmark coordinates (measurements of hand-joint positions used to recognize specific gestures).
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
In a blog on its Google Cloud’s defense page, the tech giant claims that videos are not linked to the user’s identity, audio is never recorded, and footage is deleted once verification is complete.
Google says that the feature provides stronger “liveness detection”, helping websites defend against automated account creation, credential-stuffing attacks and other forms of online fraud.
“I’m not a robot” tests shouldn’t require cameras
The move has prompted criticism from some privacy-focused users, who argue that requiring camera access for routine verification checks represents a further expansion of biometric-style monitoring online.
Biometric verification, where physical characteristics are increasingly used to authenticate identity and distinguish humans from machines, is set to expand exponentially as major territories introduce age verification tools to help implement age-gated social media for under 16s.
On X, user Lain on the Blockchain (@CryptoCyberia) said the system was “way worse” than traditional CAPTCHAs because it relied on a camera, adding that they would rather complete image-based challenges than use what they described as a “spooky” new verification method.
Others questioned whether the technology will remain effective. X user Peter Austin (@PeterAusti61402) claimed he had bypassed the challenge using a virtual camera and AI-generated animations.
Has your password leaked?
It’s not Google’s first foray into the technology. In 2023, Google Meet added a feature that allows users to raise a physical hand in front of a webcam to trigger a virtual hand raise during meetings.
The CAPTCHA rollout also comes as Google continues to explore gesture-recognition technologies.
A recently published patent application reported on X, but not verified by Cybernews, describes using acoustic signals in wearable devices to detect hand and muscle movements, potentially enabling hands-free device control without cameras or voice commands.
Unlock more exclusive Cybernews content on YouTube.