An IIT Madras study of 33 cybercrime victims finds that educated professionals are also vulnerable to financial fraud when scammers exploit stress, fear and urgency.
Chennai, Sept. 29: A study led by researchers at the Indian Institute of Technology Madras (IIT Madras) has found that financial cybercrime victims in India are not necessarily people with low digital literacy or limited financial awareness. The research found that highly educated professionals, including IT workers, bankers, doctors, management and finance professionals, public-sector officers and people with cybersecurity certifications, have also fallen victim to online financial fraud.
The study examined how fraudsters exploit psychological vulnerability rather than simply relying on victims' lack of technical knowledge. Researchers found that fear, stress and a sense of urgency could impair decision-making even among people with substantial digital experience.
The findings are based on semi-structured interviews with 33 victims — 22 men and 11 women, including 12 senior citizens — from Chennai, Bengaluru, Hyderabad, New Delhi and Mumbai. Interviews were conducted in English, Hindi and Tamil and analysed using the Gioia methodology.
According to the study, victims were frequently approached during periods of personal or professional stress. These included illness in the family, retirement, job searches and workplace pressure. Fraudsters then used fear, financial expectations and concerns about reputation or family responsibilities to pressure victims into making decisions.
The researchers described this state as an “engineered brain freeze”, with some victims referring to it as “mind arrest”. In such situations, victims reported being unable to assess the situation clearly despite having sufficient knowledge of digital technology.
The financial impact varied considerably. Losses ranged from a few thousand rupees to more than Rs 1 crore. Beyond monetary losses, victims reported consequences including shame, insomnia, depression and damage to trust within families.
The research also found differences in the way institutions responded after fraud was reported. While some banks and cybercrime units acted quickly, others were found to have limitations in technical capabilities and coordination.
The researchers said India's rapid transition to digital financial services has expanded the potential target pool for cybercriminals. Widespread mobile access, UPI and the expansion of digital financial services have brought hundreds of millions of first-generation users into the digital economy within a relatively short period.
The study examined several forms of fraud, including investment and stock-trading scams, task and job scams, digital payment fraud, malware attacks and “digital arrest” scams. It also identified India-specific tactics involving threats linked to Aadhaar, UPI transfers, fake investment platforms claiming SEBI registration and impersonation-based “digital arrest” schemes.
Prof. Nandan Sudarsanam of the Wadhwani School of Data Science and Artificial Intelligence at IIT Madras said the findings showed that cybercrime vulnerability could not be explained simply by inadequate digital literacy.
“Our findings show that financial cybercrime is not simply a problem of inadequate digital literacy,” Sudarsanam said. He added that fraudsters could exploit fear, stress and urgency even among highly educated and digitally experienced individuals.
Prof. P. Kandaswamy, IPS (Retd), Adjunct Faculty in the Department of Data Science and Artificial Intelligence and the Department of Management Studies at IIT Madras, said the response to cybercrime should move beyond blaming victims.
He called for stronger systems for early detection, rapid intervention and coordinated responses by banks and law-enforcement agencies, along with better support for people affected by fraud.
The study recommends replacing generic warnings to “be careful online” with awareness campaigns focused on specific fraud methods and circumstances in which people may be particularly vulnerable. It also calls for stronger cyber-forensic capabilities in police cyber cells, faster bank-level fraud detection and closer coordination between banks, police and courts.
The research was led by Prof. P. Kandaswamy and Prof. Nandan Sudarsanam of IIT Madras, in collaboration with Prof. Akanksha Jaiswal, Associate Professor at The University of Western Australia, Chennai Campus, and Prof. Ameeta Fernando of Loyola Institute of Business Administration, Chennai. It received support from the Wadhwani School of Data Science and Artificial Intelligence at IIT Madras.
The findings were published in Humanities and Social Sciences Communications, a peer-reviewed, open-access journal published by Springer Nature.
The researchers acknowledged that the study is qualitative and metropolitan in scope and largely reflects the experiences of victims who came forward to report their cases. They said future research will test the findings through a multilingual, large-scale survey and expand the study to tier-two and tier-three cities, the unorganised sector and long-term victim recovery.
