Google's new hand-wave reCAPTCHA can be bypassed with a stock photo

jenic_1 pts1 comments

Google's new hand-wave reCAPTCHA can be bypassed with a stock photo - Neowin

DEALS

Software

Gaming

Reviews

Guides

Hands On

Specs Appeal

Opinion

Windows 11

Write for us?

Send news tip

-->

Image: Screenshot

Google is testing a new reCAPTCHA method that asks you to wave at your camera to prove you're human. So, besides solving puzzles and reading distorted text, you can now use your computer’s camera to pass the verification test.

When the hand gesture verification is triggered, your browser asks for camera access and prompts you to perform a simple gesture, like a wave or an open palm. Google says it records a short video of the movement and uses AI to extract 21 hand-knuckle coordinates to complete the verification process. The video is then immediately deleted, and Google swears it doesn't keep it.

The process alone can be uncomfortable for people who wouldn’t want their biometric data, which hand scans technically qualify as, recorded. But it gets even more nuanced, as early testers discovered that the new hand-waving reCAPTCHA can be passed with a simple stock image.

A user on X tested the new challenge using a stock image of a hand fed through OBS Virtual Camera, and it passed. I wanted to verify it, so I tried the same thing. It took me a few tries and a few stock images, but in the end, I was also able to pass the test. I simply had to readjust the stock image of a generic person waving inside OBS, and Google’s mechanism registered it as a legitimate hand gesture.

BREAKING: google introduces new captcha entirely bypassable using stock images 👀 https://t.co/dPWiy5GwTL pic.twitter.com/nMQQPDqIqG

— PatRyk (@Patrosi73) June 28, 2026

Once again, it didn’t even have to be a video or an AI-generated hand animation. Given the simplicity of the process, the entire action can be automated in minutes. All it takes is a simple Python script to render the new reCAPTCHA method obsolete. And it doesn’t even have to be an AI bot, which is usually used for solving puzzles and other verification methods.

The new reCAPTCHA method is still in its early phase, and Google will, hopefully, update its AI to at least reject still images. However, this incident, combined with users’ initial skepticism about Google’s practices regarding user data, likely won’t make too many people wave at the camera anytime soon.

Tags

Google

Recaptcha

Security

Stock images

Artificial intelligence

Follow us onGoogle News

Add as a preferredsource on Google

Follow@NeowinFeed

Post

Like

Share

Share

Share

RSS

Report a problemwith this article

Related Stories

🛍️ Shop on Amazon using our link:

shop at Amazon at no extra cost

☕️ Support us with a virtual coffee:

2.00 Dollars ($)<br>5.00 Dollars ($)<br>10.00 Dollars ($)<br>20.00 Dollars ($)<br>25.00 Dollars ($)<br>50.00 Dollars ($)<br>100.00 Dollars ($)

🏦 Or support us with a bank transfer

Community Activity

Refresh

Celebrating Windows XP's 25th anniversary this year

in<br>Microsoft (Windows)

Game I've been Working On

in<br>Gamers' Hangout

Microsoft Opens Fairwater: Wisconsin AI Campus Runs as One Supercomputer via 800G Ethernet

in<br>Artificial Intelligence (AI)

I ANE

in<br>Introduce Yourself

Laptop Processor Question

in<br>Hardware Hangout

Starlink Mobile Is Coming for AT&T and Verizon: SpaceX Has Spectrum, Still Needs Towers

in<br>Back Page News

Elon Musk, The New King of Adult Content

in<br>Back Page News

Secure Boot

in<br>General Discussion

Software Stories

Trending Stories

Load the comments and join the conversation!

Read the comments, ask the editors questions, show respect and join the conversation.

Click here

Sort by oldest first (thread view)<br>Sort by newest first (thread view)<br>Sort by oldest first (linear view)<br>Sort by newest first (linear view)

Report Comment

Close

Please enter your reason for reporting this comment.

Weekly Recap

5 years of Windows 11, more support for Windows 10, and expensive Xbox

microsoft weekly promo

review

ZimaBoard 2 1664 Starter Kit review, it's a cool and affordable DIY NAS

zimaboard 2

weekly recap

Windows 11 turns five, Ford's mistake, and Starlink plans direct mobile service

7 days promo

hands on

Hands-on with BOOX Tappy: it's a cute little reading accessory

boox tappy

editorial

Hey Google, these are the Gemini features I want in 2026

gemini logo

review

TerraMaster F4-425 Pro: an octa-core Intel NAS that ships with AI (OpenClaw)

terramaster f4-425 pro

hands on

ProtoArc EM25: Affordable ergonomic mouse that focuses on the right things

protoarc em25

review

Creative Sound Blaster AE-X PCIe review, your headphones will love it

creative sound blaster ae-x

review

A review of Synology's BeeCamera software for the BeeStation Plus

beestation

guide

Microsoft hides these secret Windows 11 performance boost settings on every PC

windows 11

editorial

You've tried DuckDuckGo and Brave Search, now get serious with SearXNG

searxng

editorial

Delta Chat is the best decentralized messenger you've never tried

delta...

google hand stock windows recaptcha dollars

Related Articles