CaptchaTheFlag - Protect your game from bots

This can easily be bypassed by Exploiters, sorry man :confused:


But does the player have to use the captcha whenever they join the game?
Its already a hassle whenever I need to join a roblox group


The goal is to stop bots, not exploiters. Most scam bots just join a game and spam links to phishing sites; a developer can implement this to stop majority of the automated actions.


It’s all up to the developer. This does not activate automatically in any way, the developer has to invoke a BindableFunction


There are better ways to prevent bots in your game doing malicious stuff to your players. Setting up a captcha on your game is really annoying for players just trying to play. Perhaps set up a bot detector that detects if someone is trying to do something malicious. For example you can censor out anything related to ‘prize’, or ‘robux’, or ‘cash’, or even dots and ‘dot’


Hi @WishingTie09120!

Thank you for sharing this resource, it is very interesting and useful.

Would you kindly create a link to Source code (preferably Github and/or Pastebin) for people who want to read the source but don’t have any access to a PC?



I’ve read the thread and the replies, this resource is to stop bots not exploiters. Bots are automated things that, if not hardcoded into them, they cannot pass the captcha:

It even says that in the title.

This will stop the vast majority of bots, which are all lazily programmed to just spam the chat.

Instead of replying so many times, @FKAGamingDeOne, edit your OP instead, for the purpose of making the thread clean.


Yes, and the code I supplied can be implemented into bots and it can check for certain sources that disable it from doing it’s point

That’s what the original idea was, but several users pointed out that there’s really no way to get every scam-related word with just string patterns. Roblox has already implemented a fairly good chat filter, but even that can’t stop some bots. A CAPTCHA would be annoying to players, but some sort of protection is better than nothing. I guess its all up to how you implement it, if it’s in a non-obtrusive way and only used when necessary then I hope most players wouldn’t have a problem with solving a quick puzzle

This is an interesting idea, but I can see the ver. 2 captcha being too difficult for us colorblind folk.


May i know how the captcha works? Is version 1 literally just a button that has to be pressed?

Are bots programmed to be able to click on buttons? If not, then i think a much better way of presenting a captcha is by setting up a loading screen. Then the player wont be annoyed because they don’t even know its a captcha…

1 Like

Most captchas require you to click a button, but this has been bypasses like hell

I might use this for my game, i might edit it for more puzzles.

Going on-topic, are the puzzles managed through the server? For example, if i need to select the frame with the green color, is the color value that i need to select in the client or server? Thanks for reading.

Here’s a pastebin: CaptchaTheFlag - Main -

@locale Yes, version 1 is just a click puzzle. I’d assume most Roblox bots don’t have AI, they just join games and spam off-site links. However its entirely possible that a bot can be programmed to click the box as @FKAGamingDeOne pointed out

@Conejin_Alt the colors are sent to the client, but the client has no way of correlating the Color3 value and the string (unless of course, they know their colors)


Interesting, now that you mentioned it there are Colors that are seeable by most Color blind people, I think yellow and blue, however please do more research to make sure.

What if the player did something different like a Multiple choice question or a Math question?


Yes that should be a nice alternative.
A simple math equation(ex. 2+2, 4-1, etc)

@RuizuKun_Dev and @no_clu360 the multiple choice is an interesting idea, but wouldn’t a bot just be able to evaluate a math problem?

I think ill pass for now, mostly due to the hate against captchas. I think a good way of preventing players from being taken is to add a loading screen and a note that clarifies to never click on any offsite links.

What if a literal baby is playing the game?

I don’t think i’m going too far here but maybe the best way of doing this is by adding images of stuff like buses, or books, or any children related object, and asking to click on a specific one.