Google is testing a new version of reCAPTCHA that requires users to activate their cameras for identity verification. Instead of clicking images of traffic lights, users must wave their hands to prove they are human. This method uses an algorithm to map 21 hand-landmark coordinates, tracking finger joints and palm geometry to ensure liveness.

Technical documentation describes this as liveness detection to prevent automated credential stuffing and fraud. While Google claims the system deletes footage immediately and avoids audio recording, the process functions as a biometric scan. This shift moves verification away from simple puzzles toward capturing physical movement and skeletal data from a user's webcam.

Currently, the gesture-based check remains an optional test alongside traditional visual challenges. However, the privacy implications are significant given Google's history of data collection. Relying on hand geometry for security creates a new layer of sensitive data processing that users must trust the company to manage correctly.