captcha farm

a captcha farm is a human-powered service that solves thousands of captchas a minute, letting bots slip past the anti-abuse walls that onion sites hide behind.

captchas exist to prove a human is present. captcha farms industrialize defeating them: low-wage workers (often organized assembly-line style, splitting one puzzle across two screens) solve challenges around the clock, and software-as-a-service apis sell those solutions by the thousand to automation scripts.

in this scene they show up on the attack side of nearly every abuse wave: mass-registration of market accounts for shill reviews or phishing, credential stuffing against forum logins, scraping competitors' listings, and - most visibly - driving distributed denial-of-service traffic through the anti-bot gates (ddosguard and friends) that markets deploy. the captcha wall only works while solving costs more than the abuse yields; farms reset that economics.

defenders feel it as the endless arms race: harder puzzles, behavioral checks, proof-of-work tickets, invite-only registrations. each raises cost per solved captcha, which slows but rarely stops determined operators - a solved human captcha costs cents, and abuse budgets tolerate that.

for ordinary users the lesson is calibration: a captcha gate on a market is a mild speed bump against scripts, not a security boundary. judge sites on withdrawal reliability and pgp discipline, not on how annoying their bot checks are.