Yes, There’s a CAPTCHA Now β€” Here’s the Story Behind It and Why Your Security Always Comes First

July 03, 2026 by Canna City 3 minutes
Yes, There's a CAPTCHA Now Yes, There's a CAPTCHA Now
You may have noticed that recently, when visiting our site or checking out at Canna City, you are asked to confirm that you are β€œnot a robot.” We understand why this might raise questions, so here is what has been going on.Β  To give you a straight answer, we are experiencing a DDoS (distributed denial of service) attack. No, this does not mean we have been compromised; our systems have failed; or your information has been stolen. It simply means that someone is attempting to disrupt our service by sending excessive amounts of artificial traffic to our server. We will not allow this to happen.

What on Earth Is a DDoS Attack?

Imagine thousands of individuals arriving at once at a local business not to purchase products, but to prevent real customers from entering the store. This is basically what is occurring at our website, but instead of humans, these visitors are automated bots. Instead of hundreds of people, there could be thousands, tens of thousands or even millions of them. This type of attack isn’t smart, it’s not sophisticated; it’s merely a brute force effort to overwhelm our server and ultimately cause our site to become unresponsive. The CAPTCHA serves as the ‘doorman’ for our site. It allows genuine users to access the site after they verify themselves as such. In addition, the CAPTCHA prevents the large number of bot attempts to gain unauthorized entry into the site.

Why Us? Why Cannabis Sites Specifically?

Many times we receive questions regarding why cannabusinesses seem to be targeted. To answer this question honestly, we believe that cannabusinesses are more often than not viewed as easy targets. Some of the reasons include:
  • competition;
  • price scraping/stock checking robots;
  • activists seeking to bring down the industry;
  • boredom/hacktivism.
Regardless of the reason(s), it is an unfortunate part of doing business in an area that is currently polarizing.

The Good News… We’ve Been Down This Road Before!

Although we were expecting some degree of disruption, we did not expect this level of activity. As mentioned earlier, we’ve dealt with similar attacks previously. So rest assured that we will continue to serve you without interruption.

How Did We Deal with It?

We didn’t simply put our fingers crossed and hope the issue would resolve itself. Below outlines what we’ve accomplished to combat this attack:
  • implemented CAPTCHA at critical junctures throughout our platform (login, checkout, etc.);
  • upgraded and enhanced our overall security architecture to block malicious traffic prior to it reaching you;
  • engaged a dedicated security team who continually monitor and respond to the ongoing attack in real-time.
Simply stated: we identified the problem and we’re addressing it.

What Does All of This Actually Mean for You?

Honestly, not much will change. Occasionally you may encounter a simple checkbox. This minor increase in friction is minimal compared to ensuring your safety and the continued operation of Canna City. To further illustrate this point: think of the CAPTCHA process as a brief identity check prior to granting access to the site. While mildly inconvenient, it represents a very small cost for maintaining the continuity of your shopping experience and protecting your sensitive information.

Cannot Access the Site? We’re Still Here

While our system may occasionally slow or temporarily go offline during periods of high demand due to the attack, we want you to know that we won’t hide from you. You can locate us via several channels including: Drop us an email or message with your question or your order number, and we’ll assist you no matter what issues you’ve experienced.Β  DDoS attacks represent a test of endurance versus intellect; therefore, we will endure longer than the attacker. The CAPTCHA represents a reasonable and practical solution for allowing users to access the site while denying the artificial traffic. No attack, however persistent, is taking us offline for good. We’re not going anywhere β€” and neither is your order.