Fraud Defense (reCAPTCHA)

Dear sirs:Some months ago I received an email from you telling me that my Google recaptcha keys were eligible for migration in a Google Cloud project.You also tell me that my average recaptcha monthly use is of 3 evaluations in three months.I suppose that this has a cost so in that case I wouldn't be interested in using recaptcha in my Wordpress anymore.What should I do to quit using recaptcha aside deleting it from my site?.Thank you very much in advance.Greetings,Eva

We’ve received your communication regarding the upcoming migration of reCAPTCHA keys from Classic to Google Cloud projects. We’d like to understand a few details to plan this transition smoothly for our customer and application environments.Could you please confirm if there are any changes in the billing model or pricing once the keys are migrated to Google Cloud? What kind of production or service impact can be anticipated during or immediately after the migration process? Is there any downtime expected or a recommended maintenance window for performing the migration? Will the existing API endpoints, site keys, or secret keys continue to work post-migration, or do we need to update configurations on our applications? Are there any new permissions or IAM roles required on the associated Google Cloud project to manage reCAPTCHA?

Hi All ,    1 - We have 6-7 keys in old V2 admin console. We created a new google cloud project on the cloud console lets say “Cloud Project 1” . But on the old admin console, when we try to migrate the key to cloud, in the drop down we do not see the “Cloud Project 1”. We want to migrate our keys to this google cloud project, how can we ? 2 - By default it says “My project 5891” (this in in old, in cloud we do not have this project yet) , so if it try to migrate the key to this project, even after 2-3 mins nothing happened, it says some technical issue. This may be a temporary issue but just in case if any one has any idea for this. So we assume when we do this, a new project in cloud will be created with “My Project 5891”.3 - Our main goal is to migrate the keys to “Cloud Project 1” which was created in google cloud, so how can we migrate from old to new in this project ? Any settings needed in this project so that we can see it in the old consol

Hello Google reCAPTCHA Team,We’re a psychotherapist running a solo practice in Poland and we need official confirmation about reCAPTCHA data retention periods for our privacy policy compliance with GDPR.Could you please provide official information about:1. How long does Google retain data collected by reCAPTCHA v2 and v3?2. Is the 30-day retention period mentioned in some sources accurate?3. Where can I find the official documentation for these retention periods?This information is crucial for my GDPR compliance documentation.Thank you for your assistance.

We have 7-8 keys. In terms of cost effectiveness for billing as we would like to keep the billing minimum-1 - Is the 10 K limit at project level ? meaning 10K free allowed for for one project separately in google cloud or 2 - Is it for billing account (one credit card) where one billing account can be mapped for 2-3 different projects ? 3 -Basically if its at google cloud project level (irrespective of one billing account or 7 different billing accounts), then can we create 7 different google cloud projects in the same account for 7 keys with same / different billing accounts and have 10K quota for each project and key ? Basically trying to understand what’s allowed and what will save the cost for us.4- Like if 7 keys, 7 different projects, 7 billing accounts - what happens here ? only 10 K free quota or 70K free quota5 - If 7 keys, 7 different projects, 1 billing account , what happens here ? only 10 K or 70K free quota 

We have 7+ v2 classic [checkbox] keys, we got email that our keys will be automatically migrated or we can manually.We have below queries, appreciate if you can provide inline answers for all of them. There seems some confsion w.r.t needing code changes, billing etc post migration.If we manually migrate v2 (checkbox) to cloud v2 (checkbox) , it is said that no code change andwe can continue to use siteverify api. Questionsa) But after migration if our usage goes above 10000 like 150000, then what, will we be charged or not ?b) Will our siteverify api stop working and give error if more hits more than 10000 ?c) If it will give error, then how can we enable billing ? will it be enabled by default when we manually migrate orautomatically migrate ?d) What if we do not enable billing and if our v2 checkbox/invisible migrated to cloud and usage more than 10000 ?e) What if we do not enable Enter

Hello Google Cloud Support Team,I am experiencing a critical issue with my web application (tasleemai.com) where users are consistently failing to generate a reCAPTCHA Enterprise Token, which is blocking the registration process.Details: Affected Key (Site Key ID): 6LeaPgE... (Tasleem AI key) Domain: https://tasleemai.com (The site is now correctly enforcing HTTPS). Frontend Error: The browser console displays the error: Error: فشل في إنشاء رمز reCAPTCHA. which translates to "Error: Failed to create reCAPTCHA token." Key Metric Evidence: No scores or metrics are visible in the reCAPTCHA Enterprise dashboard for this key , confirming that the client-side API call (grecaptcha.enterprise.execute) is not successfully connecting to the Google service.

Hello.I submitted this question to Google Cloud's contact form, but the quote was avoided, so I'm posting it here.I apologize for the inconvenience, but could you please confirm the following?I'm currently using reCAPTCHA with a free quotation of 10,000 instances on a site I manage.I would like to use the same free quota on other sites, so I plan to create a project and billing account on Google Cloud Platform for each site on which I will implement reCAPTCHA.I just want to confirm: if I create billing accounts with the same credit card, will the free quota for reCAPTCHA be separate for each billing account?Also, will the billing information be separate?Thank you for your support.

We manage more than 100 classic V2 and V3 reCaptcha keys on https://www.google.com/recaptcha/admin.  We have already manually transferred some of these to Google Cloud Console.For example:- We manually migrated the reCaptcha keys from clientsite1.com to a new project called “clientsite1” in Google Cloud Console.- We manually migrated the keys from clientsite2.com to a new project called “clientsite2” in Google Cloud Console.- We manually migrated the keys from clientsite3.com to a new project called “clientsite3” in Google Cloud Console.And so on.But this is an impossible task because we manage a total of 150 domain names for all our customers.When Google migrates the remaining classic reCaptcha keys to Google Cloud Console at the end of this year, how will Google decide which project they will all go to?  - Will they all end up in one new project in Google Cloud Console? - Or in an existing project? - Or will eac

Dear sirWe’re writing to inform you that all Google reCAPTCHA keys will need to be migrated to a Google Cloud project by the end of 2025. This will unite all reCAPTCHA customers under a single set of terms, a consistent pricing structure, and provide access to advanced security features.We’ve provided additional information below to guide you through this change.What you need to doWe will apply the change in phases throughout the year, reaching out again by email when your keys become eligible. At that time, we will automatically create a Google Cloud project for you and associate your keys to it.However, we recommend that you get ahead of this process by following these instructions to manually migrate from reCAPTCHA Classic. This way you will be able to prescribe exactly which Google Cloud project you’ll associate with your key. Once you complete this process, the following features will be enabled immediately via Google C

We are an e-commerce team currently facing persistent issues with Google reCAPTCHA v3 returning very low scores on iOS apps. This started recently and seems to correlate with Apple’s changes in iOS 26, where User-Agent strings are now frozen.Apple introduced User-Agent freezing in iOS 26, which reports incorrect OS versions (e.g., showing iPhone OS 18_6 instead of 26). This change is part of Apple’s privacy-driven signal reduction strategy. While it improves privacy, it can confuse device detection systems and potentially impact Google’s machine learning model for reCAPTCHA scoring, which relies on signals like user-agent for risk analysis.We’ve observed:Scores dropping below 0.4 primarily for iOS traffic.Questions for the community:Has anyone else experienced similar low-score issues o

I have a question regarding test keys. Do they count towards billable assessments? 

How can we make captcha better by signing in with the verification of pictures and things. In my opinion we should only l have a password. 

In this lab I am having problem with “Task 4 Create and deploy the reCAPTCHA session token and test site key”. I did every steps and successfully but when I click in “check my progress” I receive “Please configure the HTML files as mentioned in the instructions”… Who can help me please with 

We are trying to use recaptcha on a contact form on one of our projects, however we are encountering this message on submit: We're sorry, but your computer or network may be sending automated queries. To protect our users, we can't process your request right now. We tried different networks, using vpn and not using vpn, different computers and differnt device types (eg. mobile phone etc.), we also tried different keys, as well as enterprise Keys and V3 keys all of those tests lead to the same Error message.We´d appreciate any pointers on where we could debug furhter. 

Is there a way to make the images in ReCaptcha V2 accessible by keyboard?

Hello.I've a simple question about the billing of the reCAPTCHA.To clarify, the charge for the use of reCAPTCHA is only applicable after it is working in Google Cloud ?I mean, in the meantime I won't get billed if I get more than 10000 evaluations before the migration ? Thanks in advance.  

Last year I added the Wordfence plugin to my woocommerce/wordpress site to add a level of security to my online shop. I set up the reCaptcha V3 site key and reCaptcha v3 Secret via the Google console - It was a while ago, but it all worked and set up fine. I was just checking through settings today and in the google console I was prompted to migrate and switch to Google Cloud, so I did so and now my reCaptcha status is saying I’m unprotected and I have no idea how to resolve this.I don’t fully understand any of this, so if someone could help explain what I need to do to resolve this all and to protect my website, I’d really appreciate it.When I click on the word Unprotected, I get a popup saying the following with a link to ‘Request Tokens’ UnprotectedYour key isn't requesting tokensYour key was requesting tokens (executes), but isn't any more. Something is set up incorrectly in your

Hi there,Thank you for your time.I previously submitted this question through the contact form, but I haven’t received a response, so I’m posting it here instead.Sorry for the trouble, but I’d appreciate your help with the following questions:1. Free Usage of Google reCAPTCHAI understand that to continue using reCAPTCHA for free, billing must be disabled.Is it correct that if the number of assessments exceeds 10,000 per month, users can still access the site or app, but reCAPTCHA itself will stop functioning?2. Billing Information and SettingsWhen I checked the current billing information, I couldn’t find any details—it seems unclear.Could you please advise how to confirm the billing account details?Also, if a billing account does exist, I’d appreciate it if you could check whether billing is currently enabled.3. Assessment Volume and Free UsageWe currently

<meta charset="utf-8"><!--#include virtual="/includes/SendMail.asp"--><script src="https://www.google.com/recaptcha/api.js?render=blabla1"></script><!--#include virtual="/includes/aspJSON1.9.asp"--><% If (trim(Request.Form("SendEmail")) = "Yes") Then Name = Trim( [removed by moderator] ) Dim objXmlHttp Set objXmlHttp = Server.CreateObject("Msxml2.ServerXMLHTTP") url = "https://www.google.com/recaptcha/api/siteverify?secret=blabla2&remoteip=" & Request.ServerVariables("REMOTE_ADDR") & "&response=" & trim(Request.Form("g-recaptcha-response")) objXmlHttp.open "POST", url, False objXmlHttp.setRequestHeader "Content-Type", "application/json" objXmlHttp.send() Set oJSON = New aspJSON oJSON.loadJSON(objXmlHttp.responseText) if oJSON.data("success") then strSu

We have ReCAPTCHA enterprise and have integrated with ReCAPTCHA v3 in our online application. Since about two weeks ago, ReCAPTCHA has been giving low scores, i.e. below 0.5, to a lot of our online users which prevented them from logging into their accounts. The number of low scores has increased by fivefold as compared to a couple of weeks ago, and is still in a trend of increasing.Could you advise what might be the reason behind this, given we haven't made a change to our ReCAPTCHA implementation?

I'm using Content-Security-Policy (CSP) on my website. And have setup CSP as below as per mentioned at the google developers documentation (Frequently Asked Questions  |  reCAPTCHA  |  Google for Developers😞- script-src https://www.google.com/recaptcha/, https://www.gstatic.com/recaptcha/- frame-src https://www.google.com/recaptcha/, https://recaptcha.google.com/recaptcha/But browser devtools console indicated that is an error related to CSP occurred which related to CSP's directive "connect-src". But as I find thru the develo

I  uses google captcha v3 for bot protection for submissions , and based on the documentation provided in https://cloud.google.com/recaptcha/docs/migration-overview, seems like we need to move our keys to google cloud.1. The document says users were notified of the change, but I did not receive any details on the registered gmail account. Can you please let me know how the details are shared so that we don't miss them in future.2.  Can you please share the exact date by when this needs to be completed? The document says October.3. After the migration, if we do not wish to make any code change to switch to enterprise api, can you share how the server side validation with siteverify continue to works? Behind the scene is it still using the same private classic key?4. Please confirm that without any code change, just switching the k

Hello,According to the official documentation, "Deprecation and shutdown policy for mobile SDKs," after Q3 2025, backend calls to projects.assessments.create will fail.I would like to clarify the exact expected behavior on the Android client side for the SafetyNet.verifyWithRecaptcha API call after this shutdown.Specifically, for the following code:SafetyNet.getClient(activity) .verifyWithRecaptcha(siteKey) .addOnSuccessListener { response -> // Scenario 2: Does it succeed here with an invalid token? } .addOnFailureListener { e -> // Scenario 1: Does it fail here directly? }After the Q3 2025 deadline, which of these two scenarios should we expect? Direct Client-Side Failure: The call itself will fail, and the addOnFailureListener will be triggered i

Hello everyone,According to the official documentation, "Deprecation and shutdown policy for mobile SDKs," after Q3 2025, backend calls to projects.assessments.create will fail.I would like to clarify the exact expected behavior on the Android client side for the SafetyNet.verifyWithRecaptcha API call after this shutdown. Specifically, for the following code:SafetyNet.getClient(activity) .verifyWithRecaptcha(siteKey) .addOnSuccessListener { response -> // Scenario 2: Does it succeed here with an invalid token? } .addOnFailureListener { e -> // Scenario 1: Does it fail here directly? }After the Q3 2025 deadline, which of these two scenarios should we expect? Direct Client-Side Failure: The call itself will fail, and the addOnFailureListener will be trigg