While viewing photos for a restaurant on my Google Pixel, I was repeatedly redirected to an "I'm not a robot" verification page. I initially closed it, but after seeing the same prompt during several searches, I eventually tapped the verification button and a file downloaded. I deleted the file immediately and don't believe I opened or installed it. Since then, I disconnected from the internet, cleared my browser history, cookies, saved passwords, and other data, ran scans with the phone and a security app, checked for unfamiliar apps, enabled Advanced Protection, and restarted the phone. Is there anything else I should do, or is my phone likely safe?
3 Answers
If you only downloaded the file and deleted it without opening or installing it, your phone is very likely fine. Android’s built-in protections would generally warn you or block installation of a suspicious APK. Check your Downloads folder and installed apps once more, but a downloaded file cannot do much by itself.
These fake CAPTCHA pages are usually trying to trick people into installing an app or pasting commands somewhere. The important distinction is whether you ran the file, installed an app, or followed any instructions to paste something. If none of that happened, clearing the browser data and running a scan is generally enough.
As an extra precaution, power the phone completely off and turn it back on rather than only restarting it, then install any pending system and browser updates. You can also review browser notification permissions and remove permission for any unfamiliar websites. A factory reset should not be necessary based on what you described.
I didn’t open or install it—I deleted it as soon as I noticed the download. I also checked the app list and didn’t see anything unfamiliar.