The reCAPTCHA system, originally created as a means of protecting web resources from automated attacks, has lost its original function today, turning into a tool for mass surveillance of users. According to research, its effectiveness in the fight against bots tends to zero. However, the technology remains in demand due to the ability to collect detailed digital fingerprints of users. In 2025, people around the world spent 819 million hours solving reCAPTCHA, which is equivalent to a loss of $6.1 billion in potential income. At the same time, the value of the collected data is estimated at $888 billion, providing Google with colossal profits.
Image source: Google
When logging into a bank’s website or filling out online forms, users encounter captcha (Completely Automated Public Turing test to tell Computers and Humans Apart or CAPTCHA) — tests designed to distinguish between humans and bots. These tests are used to protect web resources from automated attacks, prevent intruders from creating fake accounts and sending out mass spam. However, over time, their functionality has changed: modern CAPTCHAs, especially the reCAPTCHA system, now not only check users, but also analyze their behavior.
In 2007, Professor Luis von Ahn proposed a new approach to CAPTCHA. He believed that it could be used not only to verify users, but also to solve the problem of digitizing texts. At that time, existing algorithms were poor at recognizing words in scanned documents, especially if the font was damaged or blurred. Von Ahn developed the reCAPTCHA system, which allowed millions of users around the world to unwittingly help decipher texts by entering characters that were inaccessible to automatic analysis. One of the first companies to use this technology was The New York Times. With its help, the newspaper digitized 13 million articles published since 1851.
In 2009, Google acquired reCAPTCHA and integrated it into its ecosystem of services. Initially, the technology was used to improve Google Books by helping to process complex fragments of text that standard optical character recognition (OCR) algorithms could not correctly interpret. However, its applications did not end there. Google began using reCAPTCHA to decipher street signs, house numbers, and other text objects in the Google Street View system, which significantly increased the accuracy of the company’s mapping service.
By 2025, reCAPTCHA has become largely ineffective as a means of protecting against bots: modern machine learning algorithms easily bypass standard checks. However, Google continues to actively use it, as the key function of the technology has shifted from ensuring security to collecting detailed data about users. According to the Chuppl research group, reCAPTCHA creates a unique digital fingerprint of the browser, recording every action a person takes on a web page.
Dr. Andrew Searles, a computer security researcher at the University of California, Irvine, proved in his work Dazed & Confused: A Large-Scale Real-World User Study of reCAPTCHAv2 that the main purpose of reCAPTCHA is not to protect users, but to monitor their digital activity. According to the study, the system analyzes not only cookies and browsing history, but also a number of environmental parameters: rendering of the graphic canvas, resolution and screen parameters, trajectory and speed of cursor movement, information about the user agent, and other technical characteristics. This data forms a detailed user profile that can be used for advertising and analytical purposes.
Additionally, the study found that reCAPTCHA slows down users’ interactions with web resources. In an experiment involving 3,600 people, it turned out that solving visual tasks takes 557% longer than a standard click on the “I’m not a robot” checkbox. This leads to significant time losses and reduces the convenience of working with websites, especially in situations that require prompt action.
According to researchers, the total amount of time spent by users on reCAPTCHA was 819 million hours. In financial terms, these losses are estimated at $6.1 billion — that’s how much potential earnings users would have earned if they had spent this time on paid work. However, for Google, the situation is the opposite: collecting data using reCAPTCHA brings the company colossal benefits. The estimated value of information collected thanks to this technology reaches $888 billion, which makes it one of the most important tools for commercial analytics.
However, it is impossible to abandon reCAPTCHA. The largest web platforms, including banking services, social networks and online stores, continue to use it, making this technology an integral part of the modern digital space. A user who wants to fully work on the Internet inevitably encounters reCAPTCHA checks, thereby transmitting their data to Google.