Google's New CAPTCHA Wants You to Wave at Your Camera

The next time a website wants to check that you’re human, it may ask you to wave. Google has rolled out a new CAPTCHA that prompts users to make a hand gesture in front of their camera, the latest move in an escalating fight against bots that have learned to beat the old tests.

The system records a short video of your hand and, according to Google, extracts 21 “hand-landmark” coordinates, the positions of your finger joints and palm, to confirm a living person is making the gesture. It answers a real problem: AI agents have grown good enough at clicking the “I’m not a robot” box and picking out blurry traffic lights that the traditional puzzles are losing their point.

The fix brings its own problem. Asking users to switch on a camera and hand over biometric-style data, even briefly, has unsettled privacy and security researchers, some of whom note that a sufficiently advanced bot could in principle fake a hand too. Camera-based verification also raises the stakes of what is collected and where it goes, on a web where “prove you’re human” increasingly means “let us watch you do something.”

The gesture test fits a broader Google push into reading the body as an input device; the company has filed patents describing the use of acoustic signals in wearables to detect hand and muscle movement. It also reflects an arms race with no obvious end: every defence against bots trains the next generation of bots to beat it, and every new check asks a little more of the humans it is meant to protect.

For now the hand-wave is one option among several, not a universal gate, and Google can adjust or pull it as feedback arrives. But it is a glimpse of where verification is heading. The reassuring little checkbox is giving way to something more intimate, and the question it quietly poses, how much of yourself you will surrender just to read a web page, is not going away.