This doesn’t look like Captcha (at least not how it’s implemented elsewhere). I get multiple duplicate e-mails for a single login attempt, each stating “The request was flagged as suspicious, and we need verification that you attempted to log in to allow it to proceed.” Tonight there were two, and a couple days ago I got four of them for one login request.
The e-mails include a link, and clicking it enables login.
Tom