$ cat CAPTCHA Solvers & Black Hat SEO

A CAPTCHA solver is a service or program that returns the answer, or more often a valid token, for a CAPTCHA so that software can submit a form a human was supposed to fill in. Black hat SEO tools use them at scale: every forum signup, blog comment, Web 2.0 account and scraped search page that throws a challenge is a request sent to a CAPTCHA solving service. This chapter explains the mechanism, which tools rely on it, what it costs, and how site owners detect it. It describes the system; it is not a configuration guide.

1 · What is a CAPTCHA solver?

CAPTCHAs ask a visitor to prove they are human before a form goes through. A solver answers on the bot's behalf. There are three broad kinds: human solving farms (workers paid per thousand answers), machine solvers (models trained on a specific CAPTCHA family), and local software that runs on the operator's own machine for simple image CAPTCHAs. Commercial services usually blend the first two and sell access through an API billed per solve or per thousand credits. [4] [5] practitioner

The same services are also marketed for accessibility, QA testing and monitoring of sites you own. Whether a given use is legitimate depends on whose form is being submitted and why, not on the API call itself. interpretation

2 · How CAPTCHA solving works: the token loop

Modern CAPTCHAs (reCAPTCHA, hCaptcha, Cloudflare Turnstile) do not ask the site to check an answer. The widget produces a token; the site's server sends that token to the CAPTCHA provider's verification endpoint and gets back pass or fail. A solver's job is to produce a token the provider will accept. [7] [8] [9] confirmed

  ┌───────────────┐   1. load form    ┌──────────────────────┐
  │  SEO TOOL     │ ────────────────▶ │  TARGET SITE         │
  │  (GSA / BAS / │                   │  signup · comment ·  │
  │   ScrapeBox)  │ ◀──────────────── │  search results page │
  └──────┬────────┘   2. CAPTCHA!     └──────────┬───────────┘
         │  3. sitekey + page URL                │ 6. token posted
         ▼                                       │    with the form
  ┌───────────────┐   4. challenge    ┌──────────┴───────────┐
  │  SOLVER API   │ ────────────────▶ │  WORKER or MODEL     │
  │  (credits)    │ ◀──────────────── │  solves the rounds   │
  └──────┬────────┘   5. token        └──────────────────────┘
         │
         └──▶ tool injects token ─▶ submits ─▶ site asks provider:
                                     "is this token valid?" ─▶ PASS

The weak point is visible in the diagram: the token proves that someone solved the challenge for that sitekey, not that the visitor submitting the form did. Providers counter with short token lifetimes and single use: a reCAPTCHA response is valid for two minutes and can be verified once; a Turnstile token is valid for 300 seconds and can be validated once. [8] [9] confirmed Enterprise tiers bind a challenge to session data (hCaptcha Enterprise passes an rqdata value), so a solver must handle that value too. [2] practitioner

3 · Which black hat SEO tools use CAPTCHA solvers

Almost every automation tool in the tools database that creates accounts, posts content or scrapes search results either ships a solver or connects to solving services. The table records where the CAPTCHAs appear; it is drawn from vendor documentation and practitioner reports, not from tests run for this archive. practitioner

Because most of these tools speak the same two API styles (the 2Captcha-style in.php / res.php flow and the createTask / getTaskResult flow shared by Anti-Captcha and similar services), switching providers is often a matter of changing a host and key. NoneCap documents compatible endpoints for both styles, limited to hCaptcha tasks. [2] practitioner

4 · What the operator actually does

At the level of the person running the tool, the work is account management, not code:

1. Buys credits from one or more solving services.
2. Connects the service to the tool with an API key, usually ordering a cheap local solver first and a paid service as backup.
3. Runs projects for days: the tool generates thousands of challenges and the service answers each one.
4. Watches two numbers, cost per successful solve and success rate, and moves traffic to whichever service is cheaper or less likely to be rejected that week.

That last step is why services compete on rejected-token refunds and per-type pricing rather than on features. interpretation

5 · The services in this catalogue

Three solving services have dated records in the tools database. Coverage and prices below are what each vendor published when reviewed; solve rates have not been independently tested.

A generalist service is the default for tools that meet every CAPTCHA family. A specialist like NoneCap only helps on the share of targets that use hCaptcha, which is why operators run it alongside a generalist rather than instead of one. interpretation

6 · What a solve costs

Per-round billing changes the math. hCaptcha decides how many image rounds to show; NoneCap bills one credit per round and assumes about 1.7 rounds on an average solve. On that vendor assumption, 1,000 hCaptcha solves use roughly 1,700 credits: [3] estimate

At these prices the CAPTCHA is no longer the expensive part of a spam run. Proxies, accounts and the time before the links are deleted cost more. That is the practical reason CAPTCHAs alone no longer stop automated link building. interpretation

7 · How sites detect solved CAPTCHAs

• Server-side verification fields. Check the hostname, action and timestamp the provider returns, not just success. Reject tokens for the wrong hostname or action. [7] [8] [9] confirmed
• Risk scores. reCAPTCHA v3 and enterprise tiers return scores; set thresholds per action instead of a single site-wide pass mark. confirmed
• Behavior around the form. Time-to-submit, missing mouse or keyboard events, identical field patterns across accounts and honeypot fields that only bots fill. practitioner
• Volume patterns. Many signups from one ASN or proxy range, bursts at fixed intervals and usernames from the same generator. practitioner

8 · Defense for site owners

Treat a CAPTCHA as one speed bump, not the wall. For any site that accepts user content: mark user-submitted links rel="ugc" (or nofollow) so spam earns nothing; hold first posts from new accounts for moderation; rate-limit signups and comments per IP range; add a honeypot field; and verify every token server-side with the hostname and action checks above. Google's spam policies treat user-generated spam as the site's problem to manage, which is why an unmoderated comment section can hurt the host. [1] confirmed

9 · Risk & legal status

Buying solving credits is legal in most places and the services market accessibility and testing uses. Using them to mass-create accounts or post links on other people's sites breaks those sites' terms and the activity they enable falls under Google's link spam, user-generated spam and machine-generated traffic policies. [1] confirmed Whether a given automation campaign creates legal liability depends on jurisdiction, the terms involved and what was done; this archive does not assess individual cases. interpretation

10 · What experts get wrong

"A CAPTCHA stops link spam." It raises the cost per post by a fraction of a cent. Moderation, ugc links and rate limits do more. interpretation

"A solved token means the solver won." Sites that verify hostname, action and score, and compare solve and submit context, still reject many solved tokens. practitioner

"One solver covers everything." Coverage differs by CAPTCHA family and tier. An hCaptcha specialist does nothing for a Turnstile form. confirmed

CAPTCHA solvers: common questions

What is a CAPTCHA solver?

A service or program that answers CAPTCHAs, or returns a valid CAPTCHA token, so software can submit forms automatically. Most commercial solvers are APIs billed per thousand solves.

How do CAPTCHA solving services work?

The tool sends the CAPTCHA's sitekey and page URL to the service, a worker or model solves the challenge, and the service returns a token the tool submits with the form. The site's server then verifies that token with the CAPTCHA provider.

What is the best hCaptcha solver?

It depends on the target and the tier. NoneCap is the only hCaptcha-specific service in this catalogue and covers Enterprise (rqdata) sitekeys; generalists like 2Captcha also handle hCaptcha. This archive has not independently tested solve rates.

Is using a CAPTCHA solver illegal?

Usually not by itself. Using one to create accounts or post spam on sites you don't own breaks their terms and Google's spam policies, and legal exposure depends on the jurisdiction and conduct. This is not legal advice.

Can websites detect CAPTCHA solvers?

Often. Sites that check token hostname, action and score, and compare the solving context with the submitting browser, IP and timing, catch a large share of solved tokens.

11 · References

1. Spam policies for Google web search (link spam, user-generated spam, machine-generated traffic). Google Search Central. primary
2. NoneCap API reference (rqdata, compatibility endpoints). NoneCap, accessed 2026-11-02. vendor documentation
3. NoneCap pricing (per-round billing, ~1.7 rounds assumption). NoneCap, accessed 2026-11-02. vendor documentation
4. 2Captcha. Vendor site; price observation from the archive's 2026-09-17 public-page snapshot. vendor documentation
5. Anti-Captcha. Vendor site. vendor documentation
6. BotmasterLabs: Powering an Era of Spam (XRumer, XEvil). Castle research, March 2026. security research
7. hCaptcha developer documentation (server-side verification). hCaptcha. primary
8. Verifying the user's response (reCAPTCHA). Google for Developers. primary
9. Turnstile server-side validation. Cloudflare Docs. primary
10. How to solve GSA SER captcha automatically. DEV Community. practitioner / vendor-promoted
11. CapMonster: captcha recognition via API of other services. ZennoLab documentation. vendor documentation