Evomi

Blog

Tips on residential proxies, web scraping & security

Google Recaptcha image

Access Challenges

reCAPTCHA v2, v3 and Enterprise: How Google Scores a Visitor

Three sites can all be running reCAPTCHA and behave completely differently: one shows a checkbox, one shows nothing and quietly rates you, one asks Google's Assessment API for a risk score. This post separates v2, invisible v2, v3 and Enterprise into distinct mechanisms, covers the server-side verification properly, and lists what implementers get wrong about scores.

September 23, 2026 · 8 min read