The police should become more involved in reimbursing money to victims of cyber-crime, according to the latest research from the University of Strathclyde.

In a survey of 380 victims of crime, including some detailed interviews, researchers discovered a lack of faith in police which deterred many from reporting cyber-crime.    

While there were 8,630 cases between 2019 and 2020, only 6.6% of people who experienced bank detail theft, along with 2.1% of scam email victims, and just 1.8 % of those affected by phone scams, said they had reported the incidents to police.

Although some resolved the situation themselves by reporting it to their bank, many assumed that their bank would then report the crime after having reimbursed them.

Many of those interviewed said they were reluctant to report the crime because they blamed themselves for the incidents, with the study suggesting this could be a consequence of what it calls a ‘responsibilisation’ approach by governments, where citizens are given advice only on protecting themselves from cyber-crime, leaving them to feel solely responsible for prevention.

“Solutions for cybersecurity largely rest on the shoulders of the civilian population and the private companies that supply the solutions, and citizens often don’t have the knowledge of what is suitable,” said Dr Juraj Sikra, lead author of the paper.

“Police could form a more strategic alliance with banks at local level and assume more responsibility in awareness-raising campaigns. 

“Dealing with this crime can increase the reporting of other crimes if it increases trust towards the police but cyber-crime can be effectively mitigated only in a society that is socially interconnected, as it thrives where there is social isolation.”

The study concludes that, for police to improve relations with victims of cyber-crime, forces should work to raise awareness and reduce the stigma associated with being a victim, alongside a ‘deeper and more strategic alliance’ with banks to reimburse lost funds.

The study also recommends that, as a priority, Police Scotland should make it clear to communities that it can be relied upon in cases of economic cybercrime.

According to one victim interviewed in the study, the police “said absolutely nothing that was helpful,” after being scammed by a used car advert online, while another apparently found her local station ‘unmanned’ after going in to report a fraudulent letter from HMRC.

Recommended reading

• New Cyber Division and AI Push Part of Police Scotland Reforms
• IT Leaders Split on Generative AI’s Role in Cybersecurity
• Three Quarters of UK Firms Impacted by AI Cyber Threats

For its part, Police Scotland already maintains online guides dedicated to the most prevalent types of cyber-crime, as well as common frauds and scams, including tips on how to recognise the typical red flags associated with these crimes, and how to report them.

The force is making increasing efforts in this area, with a cyber-focused division dedicated to tackling online crimes announced as part of Police Scotland’s recent Three Year Business Plan. According to that strategy, the new unit is set to work alongside partner agencies throughout the UK to capture criminals using their ‘digital footprint’.

Scotland’s most recent crime statistics show that cyber incidents rose 13% in 2023-24, compared to the previous year, with 16,890 cyber-crimes recorded by the police. 

According to the Scottish Government, the latest data shows cyber-crimes accounted for an estimated 30% of sexual crimes, 9% of crimes of dishonesty, 4% of non-sexual crimes of violence, and less than 1% of those recorded as damage and reckless behaviour.