Google Cloud has unveiled Google Cloud Fraud Defense, a new platform it describes as the next evolution of reCAPTCHA, as the company looks to help businesses verify bots, humans, and AI agents across digital journeys.
The launch, announced at Google Cloud Next ’26 on April 23, 2026, targets a fast-changing threat landscape where agentic AI can improve customer experiences while also creating new fraud and abuse risks.
TL;DR
- Google Cloud launched Fraud Defense as the next evolution of reCAPTCHA
- It adds agentic activity measurement, a policy engine, and a QR code-based AI-resistant challenge
- Existing reCAPTCHA customers are automatically covered with no migration required
- Google is positioning the platform as trust infrastructure for the agentic web
What Is Google Cloud Fraud Defense?
Google said Fraud Defense is a trust platform for the agentic web that helps businesses secure online interactions as autonomous AI agents increasingly browse, reason, and complete tasks on behalf of users.
The platform is designed to verify the legitimacy of bots, people, and AI agents while helping organizations gain better visibility into fraud risks across digital interactions.
Google also clarified that reCAPTCHA remains its foundational bot mitigation layer, but Fraud Defense expands that role into broader fraud prevention.
What New Features Did Google Introduce?
Google introduced agentic activity measurement tools that help businesses classify and analyze AI-driven traffic patterns.
The company also launched a new policy engine that enables organizations to allow or block users and AI agents based on risk scores, automation type, and agent identity.
Another major addition is a QR code-based AI-resistant challenge designed to verify human presence when suspicious activity is detected.
Google said this makes large-scale automated fraud significantly more difficult and expensive.
Why Is Google Making This Move Now?
The company said the rise of the agentic web is reshaping digital security requirements as AI agents become increasingly capable of completing transactions and interacting with digital platforms autonomously.
Google revealed that its fraud intelligence graph currently protects more than 14 million domains globally and supports 50% of Fortune 100 companies.
It also said its unified trust model has demonstrated a 51% average reduction in account takeover attempts.
Topics for more insights:
What Happens To Existing reCAPTCHA Customers?
Google said existing reCAPTCHA customers automatically become Fraud Defense customers without requiring migration, pricing changes, or infrastructure updates.
Existing integrations and site keys will continue functioning normally.
For Google, this move reflects a broader shift in cybersecurity where businesses now need to defend against malicious AI agents while enabling legitimate ones.
Join The Discussion