A preliminary study by researchers at the University of Strathclyde has highlighted the growing role banks, charities and other organisations play in supporting victims of cyber-crime in Scotland.

The research explored how victims respond to cyber-crime in Scotland and Italy and suggests many Scots affected by cyber-crime who took part in the sample survey seek help from ‘responsibilised non-policing agencies’ – organisations which increasingly play a role in supporting victims and handling reports traditionally associated with policing.

Researchers said this risks making it harder for police to build a clear picture of the scale of the problem, which includes illegal activity involving computers, the internet or network devices. Cyber-criminals commit identity theft, initiate phishing scams, spread malware and instigate other digital attacks.

The study compared cyber-crime reporting behaviour in Scotland and Italy, as neither country has a centralised reporting system. It examined 11 Scottish organisations, four Italian organisations and surveys from 287 victims of cyber-crime across both countries. Among survey participants, researchers found that Scottish victims preferred reporting to banks rather than the police, while Italian victims were more likely to contact the police directly.

The study, which is not peer reviewed, ‘The Role of Responsibilised Non-Policing Agencies in facilitating Italian and Scottish Cybercrime reporting’, was published on the Zenodo open research repository. Researchers say the findings align with a wider trend where preventing and responding to cyber-crime is increasingly shared between individuals, businesses and third-sector organisations rather than solely by the state.

Among Scottish participants, many victims said they reported incidents to banks primarily to recover stolen money, while others avoided police because they believed reporting would be stressful or ineffective.

It also found that some vulnerable groups, including older people, can be reluctant to come forward because of the stigma associated with cyber-crime victimisation.

Recommended reading

• Terabit-Scale DDoS Attacks Now a Daily Reality, Warns Nokia
• The Largest DDoS Attack in History Has Been Recorded
• AI Cyber-crime Up 89% as Breakout Time Falls to 29 Minutes
• DDoS Attacks Dominate as Hacktivists Target Public Sector

The researchers also found that Scottish organisations working with cyber-crime victims believed reporting could be improved through greater public awareness, simpler online reporting systems, improved information sharing and reducing the shame associated with being targeted by scams.

Dr Juraj Sikra, co-author of the study and a former PhD researcher at Strathclyde, said: “Victims often blame themselves for falling for scams and removing the stigma around cyber-crime victimisation is crucial if police forces are to understand the true scale, and respond effectively.

“Our research suggests that many victims in Scotland feel more comfortable approaching banks and charities than reporting directly to the police. While these organisations provide valuable support, under-reporting can make it harder for law enforcement to identify patterns and tackle cybercriminal activity.

“The study is a first step towards understanding the issue, and exploring how cybercrime reporting could be improved by closer collaboration between technical experts, charities, businesses, police and researchers, as well as stronger international cooperation to share learning across countries.”