Towards the normalization of cybercrime victimization: A routine activities analysis of cybercrime in europe
Abstract
This study investigates the relationships between users' routine activities and socio-economic characteristics and three forms of cybercrime victimization of 1) online shopping fraud, 2) online banking fraud and 3) cyber-attacks (i.e. DDoS attacks). Data from the Eurobarometer, containing a sample of 17,811 online European citizens was analyzed. The results generally support the Routine Activities Theory. There were few differences by sex. Younger respondents were more at risk of online purchase fraud, but older respondents more of online banking fraud. Few economic characteristics were related to victimization. The three forms of victimization were interrelated relatively strongly. The characteristic of victims of online crime differ from those of traditional crime. We propose that digitalization leads to a `normalization of victims' of cybercrime.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
There is evidence that priming may be ineffective against more sophisticated forms of cyberattacks.
“However, there is also evidence that priming may be ineffective against more sophisticated forms of cyberattacks (Junger et al., 2017).”
From The influence of ethical principles and policy awareness priming on university students’ judgements about ICT code of conduct compliance (2022) · cites this paper as Junger et al., 2017
Our study lends weight to studies that show priming is not necessarily effective for activating system 2 thinking either for students or in a cybersecurity context.
“Our study contributes to the emerging, but competing, evidence on the effectiveness of priming in a cybersecurity context, and lends weight to studies that show it is not necessarily effective for activating system 2 thinking discussed earlier either for students (as found by Mazar et al. (2008)) or in a cybersecurity context (as found by Junger et al. (2017)).”
From The influence of ethical principles and policy awareness priming on university students’ judgements about ICT code of conduct compliance (2022) · cites this paper as Junger et al. (2017)
Cites
Pratt, T. C., Holtfreter, K., & Reisig, M. D. (2010) · Journal of Research in Crime and Delinquency · doi:10.1177/0022427810365903 · Cited by 411 · see citing works
Reyns, B. W. (2013) · Journal of Research in Crime and Delinquency · doi:10.1177/0022427811425539 · Cited by 287 · see citing works
Flagged first, then by citations
Cited by
Sorted by citations
Borwell, J., Jansen, J., & Stol, W. (2025) · European Journal of Criminology · doi:10.1177/14773708241312506 · Cited by 5 · see citing works
Richards, D., Nazeer Khan, S. B., Formosa, P., & Bankins, S. (2022) · Organizational Cybersecurity Journal: Practice, Process and People · doi:10.1108/ocj-01-2022-0001 · Cited by 2 · see citing works
- Authors
- Junger, M., Montoya, L., Hartel, P., & Heydari, M.
- Affiliations
- University of Twente (NL)
- Allameh Tabataba'i University (IR)
- Venue
- 2017 International Conference On Cyber Situational Awareness, Data Analytics And Assessment (Cyber SA)
- Publisher
- IEEE
- Published
- 2017-06
- Pages
- 1-8
- OpenAlex
- W2767152659
- Cited by
- 23
- References
- 2
- Citations by year
- 2026: 1 · 2025: 1 · 2024: 2 · 2023: 4 · 2022: 7 · 2021: 1 · 2020: 3 · 2019: 2 · 2018: 2
- FWCI
- 1.47
- Type
- conference paper
- Language
- en
- Open access
- closed
- Locations
- International Conference on Cyber Situational Awareness, Data Analytics and Assessment (CyberSA) (publishedVersion)
- University of Twente Research Information (publishedVersion)
- University of Twente Research Information (submittedVersion)
- Funders
- European Commission
- Topics
- Physical Sciences › Computer Science › Information Systems › Cybercrime and Law Enforcement Studies
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Law › Criminal Justice and Penology
- Keywords
- cybercrime victimization, routine activity theory, e-commerce fraud, online banking fraud, DDoS attacks, victim characteristics, age differences in victimization, socioeconomic factors, digitalization, European citizens
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review