Stuck on a phishing lure: differential use of base rates in self and social judgments of susceptibility to cyber risk

ABSTRACT

How do people assess the likelihood of personal risk in online activity? In three pilot experiments and one preregistered experiment, we tested the motivational and cognitive mechanisms that shape self and social judgments of cyber security. In Pilot Studies 1–3, we probed for evidence of differential use of base rate information in forecasting the likelihood oneself or another person would engage in a risky behavior. In the preregistered experiment, we gathered direct evidence of differential use of base rate information through covert eye-tracking. Data suggest people self-enhance when assessing risk, believing they are less likely than others to engage in actions that pose a threat to their cyber security, particularly because they rely less on base rate information when predicting their own behavior compared to others’ behavior. Self and social judgments were not different when scenarios posed no risk. We discuss implications for self-insight and interventions to curb risky behavior in online activity.

KEYWORDS:

• Self and social judgment
• self-enhancement
• weighting
• base rates
• eye-tracking

Disclosure statement

No potential conflict of interest was reported by the authors.

Supplementary material

Supplemental data for this article can be accessed https://doi.org/10.1080/23743603.2020.1756240.

Notes

1. Google Trends analysis conducted on June 19, setting the search timeline to the past 5 years, comparing search interest in the term hack (interest score of 39) against mental health (interest score of 22).

Additional information

Funding

This work was supported by the National Science Foundation [1720230].