Abstract:<p>In the phishing email literature, recent researchers have given much attention to individual differences in phishing susceptibility from the perspective of the Big Five personality traits. Although the effectiveness and advantages of the phishing susceptibility measures in the signal detection theory (SDT) framework have been verified, the cognitive mechanisms that lead to individual differences in these measures remain unknown. The current study proposed and examined a theoretical path model to explore how the Big Five personality traits, related knowledge and experience and the cognitive processing of emails (i.e., mail elaboration) influence users' susceptibility to phishing emails. A sample of 414 Chinese participants completed the 44-item Big Five Personality Inventory (BFI-44), Mail Elaboration Scale (MES), Web Experience Questionnaire, Experience with Electronic Mail Scale, Knowledge and Technical Background Test and a demographic questionnaire. The phishing susceptibility measures were calculated after the participants finished an email legitimacy task in a role-playing scenario. The results showed that the general profile of the "victim personality" included low conscientiousness, low openness and high neuroticism, and Internet experience and computer and web knowledge played an important role. All of these factors have significant indirect effects on phishing susceptibility by influencing mail elaboration. Moreover, the probabilities of checking for further information or deleting the email reflect the sensitivity of email judgment. These findings reveal the mediating role of cognitive processing between individual factors and phishing susceptibility. The theoretical implications of this study for the phishing susceptibility literature and its applications to phishing risk interventions or training programs are discussed.</p>

The effect of automation trust tendency, system reliability and feedback on users' phishing detection

How personal characteristics impact phishing susceptibility: The mediating role of mail processing

Roles of Feedback and Phishing Characteristics in Antiphishing Training Performance: Perspectives of Goal Setting and Skill Acquisition

Eyes on the Phish(er): Towards Understanding Users' Email Processing Pattern and Mental Models in Phishing Detection

So Many Phish, So Little Time: Exploring Email Task Factors and Phishing Susceptibility

Predicting susceptibility to social influence in phishing emails

The Effects of Group Discussion and Role-playing Training on Self-efficacy, Support-seeking, and Reporting Phishing Emails: Evidence from a Mixed-design Experiment

SoK: Human-Centered Phishing Susceptibility

Thwarting Instant Messaging Phishing Attacks: The Role of Self-Efficacy and the Mediating Effect of Attitude towards Online Sharing of Personal Information

Predicting User Susceptibility to Phishing Based on Multidimensional Features

The Anatomy of Deception: Measuring Technical and Human Factors of a Large-scale Phishing Campaign

Evaluation of Online Resources in Assisting Phishing Detection

The roles of phishing knowledge, cue utilization, and decision styles in phishing email detection

Phishing in Organizations: Findings from a Large-Scale and Long-Term Study

An efficient multistage phishing website detection model based on the CASE feature framework: Aiming at the real web environment

Phishing in an Academic Community: A Study of User Susceptibility and Behavior

Investigation of Phishing Susceptibility with Explainable Artificial Intelligence

The Phishing Email Suspicion Test (PEST) a lab-based task for evaluating the cognitive mechanisms of phishing detection

How Good Are We at Detecting a Phishing Attack? Investigating the Evolving Phishing Attack Email and Why It Continues to Successfully Deceive Society

Falling for Phishing: An Empirical Investigation into People's Email Response Behaviors

Using a Computational Cognitive Model to Understand Phishing Classification Decisions of Email Users