Abstract:Research problem: Phishing is an email-based scam where a perpetrator camouflages emails to appear as a legitimate request for personal and sensitive information. Research question: How do individuals process a phishing email, and determine whether to respond to it? Specifically, this study examines how users' attention to “visual triggers” and “phishing deception indicators” influence their decision-making processes and consequently their decisions. Literature review: This paper draws upon the theory of deception and the literature on mediated cognition and learning, including the critical role of attention and elaboration in deception detection. From this literature, we developed a research model to suggest that overall cognitive effort expended in email processing decreases with attention to visual triggers and phishing deception indicators. The likelihood to respond to phishing emails increases with attention to visceral cues, but decreases with attention to phishing deception indicators and cognitive effort. Knowledge of email-based scams increases attention to phishing deception indicators, and directly decreases response likelihood. It also moderates the impact of attention to visceral triggers and that of phishing deception indicators on likelihood to respond. Methodology: Using a real phishing email as a stimulus, a survey of 321 members of a public university community in the Northeast US, who were intended victims of a spear phishing attack that took place, was conducted. The survey used validated measures developed in prior literature for the most part and tested results using the partial least-squares regression. Results and discussion: Our research model and hypotheses were supported by the data except that we did not find that cognitive effort significantly affects response likelihood. The implication of the study is that attention to visceral triggers, attention to phishing deception indicators, and phishing knowledge play critical roles in phishing detection. The limitations of the study were that the data were drawn from students, and the study explored one phishing attack, relied on some single-item measures, cognitive effort measure, and a one-round survey. Future research would examine the impact of a varying degree of urgency and a varying level of phishing deception indicators, and actual victims of phishing attacks.

Metacognitive Skills in Phishing Email Detection: A Study of Calibration and Resolution

An Examination of the Calibration and Resolution Skills in Phishing Email Detection.

Using a Computational Cognitive Model to Understand Phishing Classification Decisions of Email Users

The roles of phishing knowledge, cue utilization, and decision styles in phishing email detection

Overconfidence in Phishing Email Detection.

Falling for Phishing: An Empirical Investigation into People's Email Response Behaviors

The Role of Cue Utilization and Cognitive Load in the Recognition of Phishing Emails

Research Article Phishing Susceptibility: an Investigation into the Processing of a Targeted Spear Phishing Email

Roles of Feedback and Phishing Characteristics in Antiphishing Training Performance: Perspectives of Goal Setting and Skill Acquisition

The Phishing Email Suspicion Test (PEST) a lab-based task for evaluating the cognitive mechanisms of phishing detection

The effect of automation trust tendency, system reliability and feedback on users' phishing detection

Phishing Email Detection using Persuasion Cues

Eyes on the Phish(er): Towards Understanding Users' Email Processing Pattern and Mental Models in Phishing Detection

Coping Responses in Phishing Detection: an Investigation of Antecedents and Consequences

So Many Phish, So Little Time: Exploring Email Task Factors and Phishing Susceptibility

Why People Still Fall for Phishing Emails: An Empirical Investigation into How Users Make Email Response Decisions

The role of cue utilization in the detection of phishing emails

Why do people get phished? Testing individual differences in phishing vulnerability within an integrated, information processing model

How personal characteristics impact phishing susceptibility: The mediating role of mail processing

Automation Error Type and Methods of Communicating Automation Reliability Affect Trust and Performance: an Empirical Study in the Cyber Domain

Analysis of the Performance Impact of Fine-Tuned Machine Learning Model for Phishing URL Detection