Google is testing a new anti-bot verification method that asks users to record short hand-gesture videos, raising questions about privacy, accessibility and biometric processing.
By yourNEWS Media Newsroom
Google is testing a new reCAPTCHA verification method that may require internet users to record short videos of their hands to prove they are human, marking a shift from traditional image, text and puzzle-based anti-bot systems.
Current human-verification tools often rely on distorted text, image-selection prompts or puzzle challenges that ask users to click matching pictures or move an object into the correct position. The new approach being tested by Google would instead use a device camera to analyze simple hand gestures.
“Google is testing a new reCAPTCHA method that asks users to perform simple hand gestures on camera. The service is part of Google Cloud Fraud Defense,” Biometric Update said Monday. “The biometric verification system analyzes short video clips of a user’s hand and extracts 21 knuckle-point coordinates to determine human liveness. The approach reflects trends toward using anatomical or behavioral cues to distinguish humans from bots.”
The test comes as online platforms continue searching for stronger ways to block automated traffic, fake accounts and fraud. While many smartphones, tablets and laptops already include cameras, not every internet user has one available. Some desktop systems are built without cameras, and some users intentionally avoid camera-equipped setups for privacy reasons.
The hand-video requirement could also create obstacles for people with disabilities, amputations or other conditions that prevent them from performing hand gestures. Google is developing alternatives for users who cannot complete the gesture-based process, and visual or audio verification methods will still be offered, according to Biometric Update.
The test has also raised questions because hands can function as biometric identifiers. Beyond fingerprints, the shape of a person’s hand or fingers may be used to distinguish one individual from another. Similar biometric concepts are already used in other settings, including at Disney World, where guests are identified through finger-scan technology.
“The technology takes an image of your finger, converts the image to a unique extensive numerical value, and immediately deletes the image of your finger. After the initial scan, the system will read that coded numerical value to associate you with your tickets,” planDisney said.
Google says the new hand-video system is not meant to identify individuals, but to confirm human liveness. The company says it will not store or share the recorded verification video, though users must rely on Google’s stated privacy practices because there is no obvious outside method for users to independently verify how the data is handled.
“Google doesn’t describe the feature as biometric authentication, but the extraction of anatomical landmarks places it in a regulatory grey zone at a time when UK and EU authorities are scrutinizing even ephemeral biometric processing. Google is emphasizing data minimization with no identity linkage, retention or secondary use,” Biometric Update said.
Camera access would require explicit user consent, and any collected information would fall under the Google Privacy Policy, according to Biometric Update. Users would also be able to revoke camera permissions through browser settings.
“All information collected falls under the Google Privacy Policy, and camera access requires explicit user consent. Permissions can be revoked at any time through browser settings, and Google says it does not share gesture-related data or permissions with third parties,” Biometric Update said.
The hand-gesture test reflects the growing pressure on technology companies to distinguish real users from increasingly sophisticated automated systems. It also places Google’s next-generation reCAPTCHA tools at the center of a broader debate over privacy, accessibility and whether temporary analysis of anatomical features should be treated as biometric processing.