IIT Madras Study Finds Educated Professionals Vulnerable to Cyber Fraud

Chennai : A new study led by researchers at the Indian Institute of Technology Madras (IIT Madras) has found that high levels of education and digital experience do not necessarily protect individuals from financial cybercrime. The research found that fraudsters can exploit fear, stress, urgency and financial pressure to affect decision-making.

The study is based on semi-structured interviews with 33 financial cybercrime victims from five Indian cities: Chennai, Bengaluru, Hyderabad, New Delhi and Mumbai. The participants included IT professionals, bankers, doctors, finance and management professionals, public-sector officers and individuals with cybersecurity certifications. The group comprised 22 men and 11 women, including 12 senior citizens.

The research was led by Prof. P. Kandaswamy, IPS (Retd), and Prof. Nandan Sudarsanam of IIT Madras, in collaboration with Prof. Akanksha Jaiswal of the University of Western Australia, Chennai Campus, and Prof. Ameeta Fernando of the Loyola Institute of Business Administration, Chennai. The research received support from the Wadhwani School of Data Science and Artificial Intelligence at IIT Madras.

Fear and Stress Can Affect Decision-Making

According to the study, victims were often targeted during periods of heightened vulnerability, including situations involving illness in the family, retirement, job searches and workplace pressure.

Researchers found that fraudsters used threats, financial expectations and concerns about reputation to create a state they described as an "engineered brain freeze". Victims experienced what the researchers termed "mind arrest", making it difficult for them to assess the situation and respond rationally.

The findings therefore point to factors beyond digital literacy as important elements in understanding financial cybercrime.

Victims Included Technology and Cybersecurity Professionals

The participants in the study included people with substantial professional and technical experience.

The victim group included:

• IT professionals

• Bankers

• Doctors

• Finance professionals

• Management professionals

• Public-sector officers

• Individuals with cybersecurity certifications

• Senior citizens

The researchers said the findings challenge the assumption that cyber fraud primarily affects people because they lack digital knowledge or awareness.

Financial Losses Exceeded ₹1 Crore in Some Cases

The financial impact varied significantly among participants. Reported losses ranged from a few thousand rupees to more than ₹1 crore.

The consequences also extended beyond financial losses. Victims reported experiences including shame, sleep problems, depression and strained or damaged family relationships.

The research also examined how institutions responded after fraud incidents. According to the findings, responses from banks and cybercrime cells varied, with some cases receiving quick responses while other institutions faced limitations involving technical capabilities and coordination.

Cyber Fraud Tactics Identified in the Study

The research identified several types of fraud and tactics encountered by victims in India, including:

• Fake digital arrest threats

• Investment fraud

• Task-based fraud

• Payment scams

• Fraud involving claims related to Aadhaar or other official processes

• UPI-based fraudulent transactions

• Fake investment platforms claiming regulatory registration

These tactics can combine financial pressure with threats or urgency, creating situations in which victims may find it difficult to pause and evaluate the information being presented to them.

Researchers Call for Stronger Cybercrime Response Systems

The researchers said that preventing financial cybercrime requires more than general advice to "be careful online".

Prof. Nandan Sudarsanam said the findings indicate that financial cybercrime is not simply a problem of inadequate digital literacy and that even highly educated and digitally experienced individuals can become vulnerable when fraudsters exploit fear, stress and urgency.

Prof. P. Kandaswamy said the response to cybercrime should include stronger institutional systems rather than focusing only on victims. The researchers called for improved capabilities for early detection, rapid intervention and coordinated responses involving banks and law-enforcement agencies, along with better victim support.

Recommendations for Cyber Fraud Prevention

Based on the findings, the researchers called for several improvements in cybercrime prevention and response, including:

• Stronger systems for detecting suspicious financial transactions at an early stage.

• Faster intervention by banks following reports of fraud.

• Better coordination between banks, police and courts.

• Stronger cyber-forensic capabilities within police cybercrime units.

• Awareness campaigns focused on specific fraud methods rather than only generic online safety warnings.

• Greater support for people who have already become victims of cybercrime.

Study Limitations and Future Research

The researchers noted that the study is qualitative and metropolitan in scope and is based on people who came forward to report their experiences. Therefore, the findings describe the experiences and circumstances of the interviewed victims rather than establishing how common cyber fraud is among different population groups nationally.

The research team plans to further test the findings through a multilingual, large-scale survey. Future research is also expected to examine experiences in tier-II and tier-III cities, the unorganised sector and the long-term recovery of cybercrime victims.

Conclusion

The IIT Madras-led research highlights the role of psychological and situational factors in financial cybercrime. Its interviews with 33 victims show that professional expertise and digital familiarity do not eliminate vulnerability when fraudsters create situations involving fear, stress, urgency or financial pressure.

The researchers have called for cybercrime prevention strategies that combine public awareness with stronger institutional detection, faster response mechanisms, improved coordination and better support for victims.