That CAPTCHA box isn't checking anything. It's installing malware.

Malware in three keystrokes, a fake "recall" text designed to steal your card, and an FTC "agent" who texts you a photo of his badge. All in this week's issue.