Social Engineering and Cybercrime Victimization: Understanding The Hacking Misconception, Human Vulnerabilities, and Prevention Strategies in Cyber Landscape

Abstract

In this study, prevalence of social engineering scams and cybercrime victimization has been researched. This study is conducted in Pakistan, with particular focus on major cities, as major urban centers experience rapid digital transformations. A qualitative research design is used along with semi-structured interviews with 36 cybersecurity professionals to investigate the tactics used by cybercriminals. Interview includes the exploration of human vulnerabilities that enable fraud, and the role of cybercrime awareness in preventing victimization in digital platforms. The findings reveal that social engineering attacks are very common which particularly include banking verification scams, messaging account takeovers, and investment fraud. Social engineering is the most common forms of cyber attack in Pakistan. Another important aspect of this study reveals and identifies a widespread misconception among victims and other people, who frequently describe their experiences as "hacking." It is noted that in reality victims are involved voluntarily in disclosing their sensitive information through psychological manipulation by the cyber criminals. Routine Activity Theory is used as a theoretical framework. And cybercrime victimology framework is applied for conceptual understanding. This study reveals that motivated offenders, suitable targets, and absent guardianship are the major characteristics that prevail in digital environments. In conclusion by strengthening cybercrime and cybersecurity awareness, increasing digital literacy, and improving institutional response capacity are of paramount importance for reducing cybercrime victimization in Pakistan.