Cyber deception and theft is the utilization of technology to perpetrate deception and enable theft. Theft typically denotes the act of unlawfully appropriating money or property, including credit card information, intellectual property, or digital content. The necessity for cyber deception and theft prevention is escalating, and the increased standardization and optimization of these measures is crucial for enhancing countermeasures. This paper aimed to present optimal mitigation strategies for cyber deception and theft by conducting a complete and systematic review of relevant literature, utilizing the PRISMA paradigm for systematic literature review technique. The results demonstrate that technical controls alone are inadequate for the industry. The incorporation of predictive analytics will yield more proactive preventative models. The results indicate that cyber deception and theft are systemic issues rather than individual incidents, necessitating coordinated, multi-faceted solutions. Comprehensive strategies that include behavioral awareness, multi-tiered security frameworks, forensic capabilities, regulatory alignment, and global cooperation are necessary. The research findings underscore the necessity for standardized risk-of-bias frameworks in cybercrime investigations to improve comparability and methodical synthesis in subsequent evaluations. Mitigation measures are proposed in relation to the identified phases of cyber deception and theft. Ultimately, it is advised that policy must synchronize technical regulation with behavioral risk reduction and international cooperation.
Button, M. and Cross, C. (2017) Cyber Frauds, Scams and Their Victims. Routledge.
[3]
Yar, M. (2005) The Novelty of “Cybercrime”. EuropeanJournalofCriminology, 2, 407-427. https://doi.org/10.1177/147737080556056
[4]
Dinev, T. and Hart, P. (2006) An Extended Privacy Calculus Model for E-Commerce Transactions. InformationSystemsResearch, 17, 61-80. https://doi.org/10.1287/isre.1060.0080
[5]
Danquah, P. and Longe, O. (2011) Cyber Deception and Theft—An Ethnographic Study on Cyber Criminality from a Ghanaian Perspective. JournalofInformationTechnologyImpact, 11, 169-182.
[6]
Longe, O.B., Danquah, P. and Ebem, D.U. (2012) De-Individuation, Anonymity and Unethical Behaviour in Cyberspace—Explorations in the Valley of Digital Temptations. ComputingInformationSystemsJournal, 16, 46-55.
[7]
FS-ISAC (2025) Leveling Up: A Cyber Fraud Prevention Framework for Financial Services. FS-ISAC Cyber Fraud Prevention Framework Working Group.
[8]
Wall, D.S. (2024) Cybercrime: The Transformation of Crime in the Information Age. 2nd Edition, Polity.
[9]
Page, M.J., McKenzie, J.E., Bossuyt, P.M., etal. (2021) Updating Guidance for Reporting Systematic Reviews: Development of the PRISMA 2020 Statement. Journal of Clinical Epidemiology, 134, 103-112.
[10]
Higgins, J.P.T., Altman, D.G., Gotzsche, P.C., Juni, P., Moher, D., Oxman, A.D., et al. (2011) The Cochrane Collaboration’s Tool for Assessing Risk of Bias in Randomised Trials. BMJ, 343, d5928. https://doi.org/10.1136/bmj.d5928
[11]
Sheng, S., Holbrook, M., Kumaraguru, P., Cranor, L.F. and Downs, J. (2010) Who Falls for Phish? A Demographic Analysis of Phishing Susceptibility and Effectiveness of Interventions. ProceedingsoftheSIGCHIConferenceonHumanFactorsinComputingSystems, Atlanta, 10-15 April 2010, 373-382. https://doi.org/10.1145/1753326.1753383
[12]
Levi, M. (2008) Organized Fraud and Organizing Frauds. Criminology&CriminalJustice, 8, 389-419. https://doi.org/10.1177/1748895808096470
[13]
Leukfeldt, E.R. (2014) Cybercrime and Social Ties. Phishing in Amsterdam. TrendsinOrganizedCrime, 17, 231-249. https://doi.org/10.1007/s12117-014-9229-5
[14]
Herzberg, A. and Gbara, A. (2004) TrustBar. Cryptology ePrint Archive.
Gruschka, N. and Lo Iacono, L. (2009) Vulnerable Cloud. 2009 IEEE International Conference on Web Services, Los Angeles, 6-10 July 2009, 625-631.
[17]
Casey, E. (2011) Digital Evidence and Computer Crime. 3rd Edition, Academic Press.
[18]
Schmalleger, F. and Pittaro, M. (2009) Crimes of the Internet. Pearson Prentice Hall.
[19]
Anderson, R. (2008) Security Engineering. 2nd Edition, Wiley.
[20]
Danquah, P., Longe, O.B., Lartey, J.D. and Tobbin, P.E. (2020) Towards a Theory for Explaining Socially-Engineered Cyber Deception and Theft. In: Advances in Information Security, Privacy, and Ethics, IGI Global, 44-58. https://doi.org/10.4018/978-1-7998-3149-5.ch003
[21]
Jagatic, T.N., Johnson, N.A., Jakobsson, M. and Menczer, F. (2007) Social Phishing. CommunicationsoftheACM, 50, 94-100. https://doi.org/10.1145/1290958.1290968
[22]
Jansson, K. and von Solms, R. (2013) Phishing for Phishing Awareness. Behaviour&InformationTechnology, 32, 584-593. https://doi.org/10.1080/0144929x.2011.632650
[23]
Parsons, K., McCormac, A., Butavicius, M., Pattinson, M. and Jerram, C. (2014) Determining Employee Awareness Using the Human Aspects of Information Security Questionnaire (HAIS-Q). Computers&Security, 42, 165-176. https://doi.org/10.1016/j.cose.2013.12.003
[24]
Buczak, A.L. and Guven, E. (2016) A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection. IEEECommunicationsSurveys&Tutorials, 18, 1153-1176. https://doi.org/10.1109/comst.2015.2494502
[25]
Sommer, R. and Paxson, V. (2010) Outside the Closed World: On Using Machine Learning for Network Intrusion Detection. 2010 IEEESymposiumonSecurityandPrivacy, Oakland, 16-19 May 2010, 305-316. https://doi.org/10.1109/sp.2010.25
[26]
Bonneau, J., Herley, C., Oorschot, P.C.v. and Stajano, F. (2012) The Quest to Replace Passwords: A Framework for Comparative Evaluation of Web Authentication Schemes. 2012 IEEESymposiumonSecurityandPrivacy, San Francisco, 20-23 May 2012, 553-567. https://doi.org/10.1109/sp.2012.44
[27]
Grassi, P.A., Garcia, M.E. and Fenton, J.L. (2017) Digital Identity Guidelines (NIST Special Publication 800-63B). National Institute of Standards and Technology.
[28]
Egelman, S., Cranor, L.F. and Hong, J. (2008) You’ve Been Warned: An Empirical Study of the Effectiveness of Web Browser Phishing Warnings. ProceedingsoftheSIGCHIConferenceonHumanFactorsinComputingSystems, Florence, 5-10 April 2008, 1065-1074. https://doi.org/10.1145/1357054.1357219