Which factors predict susceptibility to phishing? An empirical study

Abstract

Phishing is a cybercrime in active growth that victimizes a large number of individuals and organizations.To explore which individual and contextual factors predict phishing susceptibility, an online survey was developed, and participants were invited to participate through institutional email from the University of Porto and social networks. The total sample was constituted of 449 individuals.Results showed that subjects that perceive to have phishing detection self-efficacy and those that have greater use of services in Internet routine activities were more susceptible to phishing. Technology competencies and other individual variables do not predict phishing susceptibility in our sample.Furthermore, the majority of factors (individual and contextual) tested do not predict phishing susceptibility. So, more studies are needed to understand which factors influence this susceptibility, and regarding that how individuals can protect themselves.Finally, potential applications of this research include replication in other countries/contexts, and/or the application of the survey together with other innovative tools.