Fraud Defense (reCAPTCHA)

<meta charset="utf-8"><!--#include virtual="/includes/SendMail.asp"--><script src="https://www.google.com/recaptcha/api.js?render=blabla1"></script><!--#include virtual="/includes/aspJSON1.9.asp"--><% If (trim(Request.Form("SendEmail")) = "Yes") Then Name = Trim( [removed by moderator] ) Dim objXmlHttp Set objXmlHttp = Server.CreateObject("Msxml2.ServerXMLHTTP") url = "https://www.google.com/recaptcha/api/siteverify?secret=blabla2&remoteip=" & Request.ServerVariables("REMOTE_ADDR") & "&response=" & trim(Request.Form("g-recaptcha-response")) objXmlHttp.open "POST", url, False objXmlHttp.setRequestHeader "Content-Type", "application/json" objXmlHttp.send() Set oJSON = New aspJSON oJSON.loadJSON(objXmlHttp.responseText) if oJSON.data("success") then strSu

We have ReCAPTCHA enterprise and have integrated with ReCAPTCHA v3 in our online application. Since about two weeks ago, ReCAPTCHA has been giving low scores, i.e. below 0.5, to a lot of our online users which prevented them from logging into their accounts. The number of low scores has increased by fivefold as compared to a couple of weeks ago, and is still in a trend of increasing.Could you advise what might be the reason behind this, given we haven't made a change to our ReCAPTCHA implementation?

I'm using Content-Security-Policy (CSP) on my website. And have setup CSP as below as per mentioned at the google developers documentation (Frequently Asked Questions  |  reCAPTCHA  |  Google for Developers😞- script-src https://www.google.com/recaptcha/, https://www.gstatic.com/recaptcha/- frame-src https://www.google.com/recaptcha/, https://recaptcha.google.com/recaptcha/But browser devtools console indicated that is an error related to CSP occurred which related to CSP's directive "connect-src". But as I find thru the develo

I  uses google captcha v3 for bot protection for submissions , and based on the documentation provided in https://cloud.google.com/recaptcha/docs/migration-overview, seems like we need to move our keys to google cloud.1. The document says users were notified of the change, but I did not receive any details on the registered gmail account. Can you please let me know how the details are shared so that we don't miss them in future.2.  Can you please share the exact date by when this needs to be completed? The document says October.3. After the migration, if we do not wish to make any code change to switch to enterprise api, can you share how the server side validation with siteverify continue to works? Behind the scene is it still using the same private classic key?4. Please confirm that without any code change, just switching the k

Hello,According to the official documentation, "Deprecation and shutdown policy for mobile SDKs," after Q3 2025, backend calls to projects.assessments.create will fail.I would like to clarify the exact expected behavior on the Android client side for the SafetyNet.verifyWithRecaptcha API call after this shutdown.Specifically, for the following code:SafetyNet.getClient(activity) .verifyWithRecaptcha(siteKey) .addOnSuccessListener { response -> // Scenario 2: Does it succeed here with an invalid token? } .addOnFailureListener { e -> // Scenario 1: Does it fail here directly? }After the Q3 2025 deadline, which of these two scenarios should we expect? Direct Client-Side Failure: The call itself will fail, and the addOnFailureListener will be triggered i

Hello everyone,According to the official documentation, "Deprecation and shutdown policy for mobile SDKs," after Q3 2025, backend calls to projects.assessments.create will fail.I would like to clarify the exact expected behavior on the Android client side for the SafetyNet.verifyWithRecaptcha API call after this shutdown. Specifically, for the following code:SafetyNet.getClient(activity) .verifyWithRecaptcha(siteKey) .addOnSuccessListener { response -> // Scenario 2: Does it succeed here with an invalid token? } .addOnFailureListener { e -> // Scenario 1: Does it fail here directly? }After the Q3 2025 deadline, which of these two scenarios should we expect? Direct Client-Side Failure: The call itself will fail, and the addOnFailureListener will be trigg

Timeframe:Since 09:00 on 28/08/2025 (GMT) we have been getting errors which seem to be related to google reCAPTCHACall is made to:https://www.google.com/recaptcha/api2/clr?k=6LeeZmsfAAAAAK-SB2w-6_XpkLha7vsRLlRvH8e1 Issue:Because of the errors it is blocking our endpoints from being successful. This call is being made immediately after an internal server call that we make, example below Question:

On reCAPTCHA I do see two domains that I once used, but they are not valid/available anymore; they do not use reCAPTCHA anymore. How to delete those entries from the reCAPTCHA portal?

We have a number of clients who have access to their reCAPTCHA keys currently via the console. We usually create the keys, then invite the client as an owner of the site. Other clients may even have multiple owners in their organisation. Presumably anyone with access to a reCAPTCHA key will be getting emails about keys for migration.If no action is taken and the keys are migrated automatically, where will the GCP project be created and who will have access to the new project? If there is a single owner, how is the owner determined as reCAPTCHA’s existing admin console doesn’t seem to provide a way of determining who the person who originally created the key is?

Hi guys,this morning I tried to open my instagram app but there was a recaptcha verification Everythime when I try to do it it says Captcha solution is not correct I tried different browsers like google chrome firefox opera  I tried also logging from other devices(I can login but can't complete reCAPTCHA)And I can't write to instagram support because I can't even see my homepage in instagram so I can start conversationPlease someone help me

How to choose standard plan for recaptchaHere is the plans for recaptchahttps://cloud.google.com/security/products/recaptcha?hl=en#pricingI want to go for "reCAPTCHA Standard".I created  "reCAPTCHA Essentials" and  manage recaptcha from for https://www.google.com/u/2/recaptcha/admin/site/xxxand display key details at https://console.cloud.google.com/security/recaptcha/xxxI used 4K of 10K so far. I enabled billing (free trial currently). And I created reCAPTCHA Enterprisehttps://www.google.com/recaptcha/admin/enterpriseBut I cannot fi

I have a monitoring probe and the recaptcha is blocking it. I've tried everything, including whitelisting, and it still doesn't work. I'd like to hear about your experiences with this.

 I received email from Google Cloud. Then I registered here.Is this working ?? I don’t use it on my website. How can I do for you ?And I use CloudFlare.  So I would like to delete this domain.Thank you for support.I don’t need to use this for now.

Buenas díasHe recibido el siguiente correo electrónico: “A principios de este año, te informamos de que todas las claves de Google reCAPTCHA deberán migrarse a proyectos de Google Cloud antes de que acabe el 2025.”En el correo también dice lo siguiente: “Uso y facturación:De media, tu uso mensual de reCAPTCHA tiene 68 evaluaciones en los tres últimos meses. Puedes introducir esa cantidad en esta calculadora de precios para estimar los cargos que se aplicarán a tu uso. También puedes consultar más información sobre 

 I received email from Google Cloud. Then I registered here.And I use CloudFlare.  So I would like to delete this domain.Thank you for support.I don’t need to use this for now.

Hello, I’m having issues with https://www.google.com/recaptcha/api/siteverify. I’m calling this via cUrl from a php laravel app. I’m using php 8.3Here is the cUrl function which I’m using$captchaResults = Utility::curlCall( 'https://www.google.com/recaptcha/api/siteverify', 'POST', $captchaParams);public static function curlCall( $url, $type = 'GET', $arguments = [], $encodeData = false, $returnHeaders = false) { $type = strtoupper($type); if ($type == 'GET') { $url .= '?'.http_build_query($arguments); } $curl_request = curl_init($url); if ($type == 'POST') { curl_setopt($curl_request, CURLOPT_POST, 1); } elseif ($type == 'PUT') { curl_setopt($curl_request, CURLOPT_CUSTOMREQUEST, 'PUT'); } elseif ($type == 'DELETE') { curl_setopt($curl_r

Hi, I need help. Google is probably blocking my public IP address for recaptcha verification.I've already checked my browser and firewall and AV.After changing the gateway address to a different public address, recaptcha works correctly on the hosts.How do I report my public IP being added to the google whitelist?Best regards,Sławomir H

Hello,I am probably not the only one receiving a mail that starts as follows:“”Earlier this year, we informed you about the upcoming migration of all Google reCAPTCHA keys to Google Cloud projects by the end of 2025.We're now reaching out to inform you that your reCAPTCHA keys are eligible for migration.“”So far I have a website where people can “register” and “log in” - and as some extra check I have added a free reCAPTCHA.Now I do simply not understand what that mail wants to tell me! Except: If you become a paying customer, we can offer you tons of fancy features in the future. Ok, that is obvious.However what I do NOT read: If you just want to continue a free reCAPTCHA in your website login, do the following… etc.So my question is: Is there such an option at all? Or is the message basically telling me that in the future I will have to either drop that reCAPTCHA or pay for it?Thanks for any helpful answer, and bes

I have had Recaptcha on our ecommerce website for a few years without problem. I have identical site themes (Kallyas) hosted on the same server which all work well, but one site the Recaptcha has suddenly stopped working. Recaptcha is built into the theme so just have to input the key and secret key.The site theme, Wordpress and plugins are all up to date, I've created new keys multiple times, and tried V2 and V3, and have disabled all plugins but no avail. I hadn't made any changes to the site and suddenly both forms on the site started displaying "ERROR for site owner: Invalid site key".  My hosting company (Brixly) and domain registrar (Fasthosts) have no idea and believe the fault lies with google. Does anyone have any idea what to try next as I'm totally stumped.  Many thanks!

I currently have ten (10) websites that use reCAPTCHA v2. I received the email inviting me to migrate sites to GCP. When I clicked through, I arrived at a page that listed five of my sites in a table with “Key Name”, “Type” and “Site ID” as headers (and a check box at the beginning of each row). Above that table was a drop-down select menu labeled “Project Name,” with two OTHER sites available as options. Each sites should either be a Project or a Site, in my opinion, not one or the other (and there’s no obvious way to organize my portfolio into “Projects” or “Sites” anyway).It’s entirely unclear what selecting a project from the drop-down menu (and why are not ALL of my sites in that menu?) versus checking or unchecking the sites listed in the table will do and what will happen when I click “Submit.”It feels as though there is some error in the migration process or some other automated process that is seeing two of my sites differently from the other five that are cur

I have legacy reCAPTCHA v2 and v3 keys in use across a number of websites. I’ve received the notification that my keys are eligible for migration to Google Cloud.Since I set up these keys, I’ve started to consolidate my web development on a separate Google account for work purposes. So, ideally, I’d like migrate my legacy keys to a Google Cloud project associated with a different Google account than the one that the legacy keys are associated with. I’d also like to continue to use the legacy endpoints for now.Is it going to be possible to achieve these aims through manual migration?

I’m trying to see what the damage is going to be now the Google is going to be charging for reCAPTCHA (so I can plan to bill my clients), and the calculator isn’t working.  Worse, it’s telling me I can’t link a billing account because I don’ t have access.  It’s my only Google account.Any ideas?

Hello everyone, I just recieved an email from google regarding my recaptcha keys being elegible for migration to a google cloud project. I migrated the only recaptcha key I’ve got a few months ago. I’m guessing this is an automatic email and nothing will happen but the email also says this and it kinda worries me that somehow it creates another project for the key or something like that: Option 2: Allow for automatic associationIf you take no action within 90 days of receiving this communication, your keys will automatically be associated with a Google Cloud project. You’ll be notified when the process is complete Thanks in advance!

I just migrated the remaining reCAPTCHA keys to Google Cloud. However one of them has gone into the wrong project.How do i move the key to a different project?Thanks

Hi. Ich habe eine Mail bekommen das wohl etwas kostenpflichtig wird. Ich kann kein Englisch und verstehe es nicht. Im Dashboard finde ich auch nicht um was es im schreiben geht. Ich möchte das nicht und will es abmelden, kündigen, nicht umziehen. Bitte um Hilfe