“Is reCAPTCHA going away?”

Is reCAPTCHA going away?

Updated October 18, 2026By the CaptchaKit team

Short answer

No. In April 2026 Google launched Google Cloud Fraud Defense and called it the next evolution of reCAPTCHA, not a shutdown. Existing reCAPTCHA customers are automatically Fraud Defense customers, with no migration, no action needed and no change to pricing, and existing site keys and integrations remain as they are. Google has marked some reCAPTCHA docs pages deprecated and points them at Fraud Defense.

What Google announced

On April 23, 2026, at Google Cloud Next, Google announced Google Cloud Fraud Defense, describing it as the next evolution of reCAPTCHA. It folds reCAPTCHA's bot detection into a broader fraud platform that is designed, in Google's own words, to verify the legitimacy of bots, humans, and AI agents.

Fraud Defense also adds a QR code challenge for risky sessions: a human scans a code with their phone to prove human presence, a mitigation Google says is designed to make automated fraud economically unviable.

What happens to existing reCAPTCHA sites

Nothing breaks. Google wrote that existing reCAPTCHA customers are automatically Fraud Defense customers, with no migration required, no action needed, and no change to pricing, and that your existing site keys and integrations remain exactly as they are today.

The usage-based model also carries over. Reporting by InfoQ says Fraud Defense keeps the same usage-based pricing model, with up to 10,000 security assessments a month free before volume charges apply, matching the free tier reCAPTCHA customers already had.

The docs are marked deprecated

The developer pages for reCAPTCHA v3 and the FAQ now carry a deprecation notice pointing to the Google Cloud Fraud Defense documentation. Deprecated is not deleted: the APIs, score ranges and verify flow you built against still work, and Google has not announced an end date for them.

If you are starting a new integration, build against Fraud Defense. See reCAPTCHA v2 vs v3 for how the two older versions differ.

Reasons to switch anyway

No urgency comes from the announcement itself. Reasons to look around are the usual ones: cookie consent, since reCAPTCHA sets the _GRECAPTCHA cookie, covered in reCAPTCHA and GDPR cookie consent; cost, if you run past the free tier each month, covered in is reCAPTCHA still free; or the challenge itself, if image puzzles cost you conversions.

If you want a visible challenge that behaves like a game rather than a puzzle, CaptchaKit is one option among many in reCAPTCHA alternatives.

Questions

Is reCAPTCHA being shut down?

No. Google calls Fraud Defense the next evolution of reCAPTCHA, and existing site keys and integrations remain as they are.

Do I have to migrate to Fraud Defense?

No. Google says existing reCAPTCHA customers are automatically Fraud Defense customers, with no migration required and no action needed.

Will my site keys stop working?

Google says existing site keys and integrations remain exactly as they are today.

Does Fraud Defense cost more?

Google says there is no change to pricing for existing customers, and InfoQ reports the same usage-based model with up to 10,000 free assessments a month.

What is the QR code challenge for?

For risky sessions, Fraud Defense can ask a human to scan a QR code with their phone to prove human presence.

Why do the reCAPTCHA docs say deprecated?

Google is pointing the old reCAPTCHA developer pages to the Fraud Defense docs. The old APIs still work and no end date has been announced.

Should I move off reCAPTCHA?

Only for your own reasons, such as cookie consent, cost or challenge friction. The announcement alone is not a reason.