A fake CAPTCHA is a security challenge designed to look like a legitimate CAPTCHA but is a scam. Its purpose is to trick users into executing malicious code on their device. This code downloads and executes malware from a malicious site, stealing passwords, cookies, cryptocurrency wallet details, and other personal and financial information.