To click or not to click the link: the factors influencing internet banking users’ intention in responding to phishing emails

Abstract

Purpose Despite internet banking’s popularity, there is a rise in phishing attacks related to online banking transactions. Phishing attacks involved the process of sending out electronic mails impersonating the valid banking institutions to their customers and demanding confidential data such as credential and transaction authorisation code. The purpose of this paper is to propose a theoretical model of individual and technological factors influencing Malaysian internet banking users’ intention in responding to malicious uniform resource locator (URL) in phishing email content. Design/methodology/approach It applied the protective motivation theory, the theories of reasoned action and planned behaviour, the habit theory and the trust theory to examine the factors influencing internet banking users’ intention to click URLs in phishing emails. The study identifies individual and technological factors with ten hypotheses. A total of 368 Malaysian respondents voluntarily participated in an online survey conducted in the first week of March 2021. The partial least squares method provided in SmartPLS-3 was used to model the data. Findings The results revealed that individual factors, namely, internet banking experience, understanding the phishing meaning, response cost, trust and perceived ability were the significant influencing factors of internet banking users’ intention to click the link in phishing emails. This study also suggested that technological factors were not relevant in describing the behavioural intention of internet banking users in clicking the links in phishing emails. Social implications The findings could contribute to Malaysian banking sectors and relevant government agencies in educating and increasing internet banking users’ awareness towards phishing emails. Originality/value The outcomes demonstrated the individual factors that influenced internet banking users’ intention in responding to phishing emails that are specific and relevant to Malaysia’s context.

Online Banking User Authentication Methods: A Systematic Literature Review

“…Usually, this is accomplished by using phoney emails, texts, or websites that impersonate reputable websites. Once a user gives personal information, the attacker can exploit it to access that user's online banking account without authorization [88], [109].…”

Detection of phishing addresses and pages with a data set balancing approach by generative adversarial network (GAN) and convolutional neural network (CNN) optimized with swarm intelligence

“…To carry out phishing attacks, the thief fakes legitimate and original websites and uploads a fake version online. Fake pages and links are very similar to legitimate sites, and most users trust these sites 10 …”

“…Fake pages and links are very similar to legitimate sites, and most users trust these sites. 10 Phishing attacks have a cycle, and user information is stolen in this cycle. A fake website is an upload to the Internet in the first phase of phishing attacks.…”

Assessing the Effect of Online Banking Service Quality on Customer Loyalty in Malaysian Banking Industry: The Mediating Role of Customer Satisfaction

“…As consequently, the banking industry has become an important sector that depends extensively on the Internet to provide online banking services to its customers (Azzam et al, 2021;Redda, 2023). Online banking is an electronic system enabling customers to perform financial transactions without visiting a physical bank branch, encompassing services conducted through the Internet, such as fund transfers, bill payments, and online investments (Aburrous et al,2010;Jolly, 2016;Manoharan et al, 2022;Sathye, 1999). It operates through internet portals and can be accessed using devices such as smartphones, tablets, and ATMs.…”