Developing a harm index for individual victims of cybercrime

Scam alert notification displaying on mobile phone
Abstract

In this study we used data from the 2023 Australian Cybercrime Survey to develop a harm index for individual victims of cybercrime. The index comprises scores for 17 common types of cybercrime.

These scores were based on a 34-item measure of cybercrime harm encompassing practical, health, social, financial and legal impacts. Harm scores were based on victim reports of the prevalence and severity of each harm. These harm scores were strongly associated with reporting to police and to ReportCyber, which helps validate the index.

The scores provide a measure of the relative severity of each type of cybercrime. We used these harm scores to measure concentration among cybercrime victims. Overall, just 10.9 percent of victims accounted for 57.7 percent of the harm to all victims who completed the survey.

Repeat victims who experienced multiple types of cybercrime are disproportionately impacted and should be prioritised for intervention.

References

URLs correct as at October 2024

Agrafiotis I et al. 2016. Cyber harm: Concepts, taxonomy and measurement. Saïd Business School WP. https://doi.org/10.2139/ssrn.2828646

Australian Bureau of Statistics (ABS) 2023. National, state and territory population, September 2022. https://www.abs.gov.au/statistics/people/population/national-state-and-territory-population/sep-2023

Australian Competition and Consumer Commission (ACCC) nd. Scam statistics. https://www.scamwatch.gov.au/research-and-resources/scam-statistics

Australian Competition and Consumer Commission 2023. Targeting scams: Report of the ACCC on scams activity 2022. Canberra: ACCC. https://www.accc.gov.au/about-us/publications/serial-publications/targeting-scams-reports-on-scams-activity/targeting-scams-report-of-the-accc-on-scams-activity-2022

Australian Signals Directorate (ASD) 2023. ASD cyber threat report 2022–2023. https://www.cyber.gov.au/about-us/view-all-content/reports-and-statistics/asd-cyber-threat-report-july-2022-june-2023

Bates S 2017. Revenge porn and mental health: A qualitative analysis of the mental health effects of revenge porn on female survivors. Feminist Criminology 12(1): 22–42. https://doi.org/10.1177/1557085116654565

Birdsey E & Snowball L 2013. Reporting violence to police: A survey of victims attending domestic violence services. Bureau Brief no. 91. Sydney: NSW Bureau of Crime Statistics and Research. https://bocsar.nsw.gov.au/media/2013/mr-bb91.html

Blaauw E, Winkel FW, Arensman E, Sheridan L & Freeve A 2002. The toll of stalking: The relationship between features of stalking and psychopathology of victims. Journal of Interpersonal Violence 17: 50–63. https://doi.org/10.1177/0886260502017001004

Borwell J, Jansen J & Stol W 2022. The psychological and financial impact of cybercrime victimization: A novel application of the shattered assumptions theory. Social Science Computer Review 40(4): 933–954. https://doi.org/10.1177/0894439320983828

Boxall H & Morgan A 2021. Intimate partner violence during the COVID-19 pandemic: A survey of women in Australia. Research report 03/2021. Sydney: Australia’s National Research Organisation for Women’s Safety. https://www.anrows.org.au/publication/intimate-partner-violence-during- the-covid-19-pandemic-a-survey-of-women-in-australia/

Cross C, Richards K & Smith RG 2016. The reporting experiences and support needs of victims of online fraud. Trends & issues in crime and criminal justice no. 518. Canberra: Australian Institute of Criminology. https://doi.org/10.52922/ti148355

Decker E 2020. Full Count? Crime rate swings, cybercrime misses and why we don’t really know the score. Journal of National Security Law and Policy 10: 583-604. https://jnslp.com/wp-content/uploads/2020/05/Crime-Rate-Swings-Cybercrime-Misses.pdf

Dudfield G, Angel C, Sherman LW & Torrence S 2017. The “power curve” of victim harm: Targeting the distribution of crime harm index values across all victims and repeat victims over 1 year. Cambridge Journal of Evidence-Based Policing 1(1): 38–58. https://doi.org/10.1007/s41887-017-0001-3

Golladay K & Holtfreter K 2017. The consequences of identity theft victimization: An examination of emotional and physical health outcomes. Victims & Offenders 12(5): 741–760. https://doi.org/10.1080/15564886.2016.1177766

Grove L, Farrell G, Farrington DP & Johnson SD 2012. Preventing repeat victimisation: A systematic review. Stockholm: Swedish National Council for Crime Prevention

House PD & Neyroud PW 2018. Developing a crime harm index for Western Australia: The WACHI. Cambridge Journal of Evidence-Based Policing 2(1–2): 70–94. https://doi.org/10.1007/s41887-018-0022-6

Ignatuschtschenko E 2021. Assessing harm from cyber crime. In P Cornish (ed), The Oxford handbook of cyber security. Oxford: Oxford University Press: chapter 8

Jansen J & Leukfeldt R 2018. Coping with cybercrime victimization: An exploratory study into the impact and change. Journal of Qualitative Criminal Justice & Criminology 6(2). https://doi.org/10.21428/88de04a1.976bcaf6

Jenaro C, Flores N & Frías CP 2018. Systematic review of empirical studies on cyberbullying in adults: What we know and what we should investigate. Aggression and Violent Behavior 38: 113–122. https://doi.org/10.1016/j.avb.2017.12.003

Morgan A, Dowling C, Brown R, Mann M, Voce I & Smith M 2016. Evaluation of the Australian Cybercrime Online Reporting Network. Report prepared for CrimTrac. Canberra: Australian Institute of Criminology. https://www.aic.gov.au/sites/default/files/2020-06/acorn_evaluation_report_.pdf

Muller CJ & MacLehose RF 2014. Estimating predicted probabilities from logistic regression: Different methods correspond to different target populations. International Journal of Epidemiology 43(3): 962–970. https://doi.org/10.1093/ije/dyu029

Ransley J et al. 2018. Developing and applying a Queensland Crime Harm Index—implications for policing serious and organised crime. In RG Smith (ed), Organised crime research in Australia 2018. Research Report no. 10. Canberra: Australian Institute of Criminology: 105–114. https://doi.org/10.52922/rr202682

Rossi PH & Henry JP 1980. Seriousness: A measure for all purposes? In MW Klein & KS Teilmann (eds), Handbook of criminal justice evaluation. Newbury Park: Sage: 489–505

Rossi PH, Waite E, Bose CE & Berk RE 1974. The seriousness of crime: Normative structure and individual differences. American Sociological Review 39: 224–237. https://doi.org/10.2307/2094234

Sheridan LP & Grant T 2007. Is cyberstalking different? Psychology, Crime & Law 13(6): 627–640. https://doi.org/10.1080/10683160701340528

Sherman L, Neyroud PW & Neyroud E 2016. The Cambridge Crime Harm Index: Measuring total harm from crime based on sentencing guidelines. Policing: A Journal of Policy and Practice 10(3): 171–183. https://doi.org/10.1093/police/paw003

Stylianou S 2003. Measuring crime seriousness perceptions: What have we learned and what else do we want to know. Journal of Criminal Justice 31(1): 37–56. https://doi.org/10.1016/s0047-2352(02)00198-8

Teunissen C, Voce I & Smith RG 2021. Estimating the cost of pure cybercrime to Australian individuals. Statistical Bulletin no. 34. Canberra: Australian Institute of Criminology. https://doi.org/10.52922/sb78269

Tokunaga RS 2010. Following you home from school: A critical review and synthesis of research on cyberbullying victimization. Computers in Human Behavior 26(3): 277–287. https://doi.org/10.1016/j.chb.2009.11.014

Van de Weijer S, Leukfeldt R & Van der Zee S 2021. Cybercrime reporting behaviors among small- and medium-sized enterprises in the Netherlands. In M Weulen Kranenbarg & R Leukfeldt (eds), Cybercrime in context: Crime and justice in digital society. https://doi.org/10.1007/978-3-030-60527-8_17

Van de Weijer S, Leukfeldt R & van der Zee S 2020. Reporting cybercrime victimization: Determinants, motives, and previous experiences. International Journal of Police Strategies & Management 43(1): 17–34. https://doi.org/10.1108/PIJPSM-07-2019-0122

Van Ruitenburg T & Ruiter S 2022. The adoption of a crime harm index: A scoping literature review. Police Practice and Research 24(4): 423–445. https://doi.org/10.1080/15614263.2022.2125873

Voce I & Morgan A 2023. Cybercrime in Australia 2023. Statistical Report no. 43. Canberra: Australian Institute of Criminology. https://doi.org/10.52922/sr77031

Voce I & Morgan A 2021. Ransomware victimisation among Australian computer users. Statistical Bulletin no. 35. Canberra: Australian Institute of Criminology. https://doi.org/10.52922/sb78382

Warr M 1989. What is the perceived seriousness of crimes? Criminology 27: 795–814. https://doi.org/10.1111/j.1745-9125.1989.tb01055.x

Whitty M & Buchanan T 2015. The online dating romance scam: They psychological impact on victims—both financial and non-financial. Criminology and Criminal Justice 13(1): 37–61. https://doi.org/10.1177/1748895815603773

Xie M & Baumer EP 2019. Crime victims’ decisions to call the police: Past research and new directions. Annual Review of Criminology 2(1): 217–240. https://doi.org/10.1146/annurev-criminol-011518-024748

Zych I, Ortega-Ruiz R & Del Rey R 2015. Systematic review of theoretical studies on bullying and cyberbullying: Facts, knowledge, prevention, and intervention. Aggression and Violent Behavior 23: 1–21. https://doi.org/10.1016/j.avb.2015.10.001