Password reset is refused while reCAPTCHA is on. The Forgot password page doesn't send the reCAPTCHA check yet, so reset requests are rejected. Customers who forget their password can't reset it until you switch reCAPTCHA off. Weigh this before enabling it.
Test login and registration after enabling. If your store uses CartWhizz's shared keys, check that login and registration still work in a private window. If they fail with reCAPTCHA token is required, switch it off and contact support.
Strict scores block real people. VPNs, office networks and brand-new devices score lower. Don't go above 0.7.
Script blockers. Shoppers who block Google scripts can't pass the check.
Google outages. If Google can't be reached, requests are allowed through.
Not on checkout. Guest checkout and order placement aren't protected by reCAPTCHA; use OTP Verification and Payment Restrictions against fake orders.