Exploring the Factors that Influence an Internet User's Ability to Correctly Identify Phishing Websites

The Internet has become a very important medium of communication. Internet access is no longer limited to technical people only. All ages are now connected online, and they use Internet for conducting a wide range of business. Because of the growth of the Internet and so many users connected, collecting personal information through a phishing website is also easy for a fraudster. They use websites that look similar to those of legitimate organizations and exploit the end-user’s lack of knowledge of web browser clues and security indicators. This research study was conducted to empirically investigate the factors that influence Internet user’s ability to correctly identify phishing websites. Quantitative data was collected by simulating a phishing attack where participants were required to complete a task by signing into one of their e-mail accounts online. The impact of age, gender, education, awareness of phishing and previous encounter with phishing had on their ability to correctly identify the phishing website was measured. We found that many Internet users do not understand phishing attacks or realize how sophisticated such attacks can be. However, we found users who were victims of phishing in past did well to identify the phishing website.